Technical Information
- %TEMP%\3847.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '15#.#01.129.91':443
- '%TEMP%\3847.tmp' --ping<Full path to file> F4923AC02C2143F464ED601A3FDB233A7D518A968A3144D91122435DE2568D3752060BFA7FB79A9EB6A767F7EBA47E5C918D2044AACC1F6ADFEDCC09FEFBDE56
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\3847.tmp' --ping<Full path to file> F4923AC02C2143F464ED601A3FDB233A7D518A968A3144D91122435DE2568D3752060BFA7FB79A9EB6A767F7EBA47E5C918D2044AACC1F6ADFEDCC09FEFBDE56' (with hidden window)