Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 7F1D34FD1592262BC6E90985B95B32ADDA786C8B92A4B37CC4B6F30CDAD329A29678E9F144078C72ADFF289ADE4E7AAFE52C0AB7661CD42DEF798CC473BF77E0
- '%TEMP%\1.tmp' --ping<Full path to file> 7F1D34FD1592262BC6E90985B95B32ADDA786C8B92A4B37CC4B6F30CDAD329A29678E9F144078C72ADFF289ADE4E7AAFE52C0AB7661CD42DEF798CC473BF77E0' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde