Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 1F8D2C8C60EA7C13199CBA9E5B41E354B05C541A9285A11B84992C77E758BDCF21923981E8E9BF02CFE217907004DFAB6FB44F0B054B23C6BE23C2E5E9D9AFF4
- '%TEMP%\1.tmp' --ping<Full path to file> 1F8D2C8C60EA7C13199CBA9E5B41E354B05C541A9285A11B84992C77E758BDCF21923981E8E9BF02CFE217907004DFAB6FB44F0B054B23C6BE23C2E5E9D9AFF4' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde