Technical Information
- %TEMP%\62e7.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '34.##9.100.209':443
- '%TEMP%\62e7.tmp' --ping<Full path to file> 9BD5C53DBB1157D15A0DFCD572CD332BB9517F8EE10A14B1C36389475F16206AF9F4D2C1E9CE20CF13B906C0754C13819A12C1F9E73ECCA5A2C1E03DF296D2CC
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\62e7.tmp' --ping<Full path to file> 9BD5C53DBB1157D15A0DFCD572CD332BB9517F8EE10A14B1C36389475F16206AF9F4D2C1E9CE20CF13B906C0754C13819A12C1F9E73ECCA5A2C1E03DF296D2CC' (with hidden window)