Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> F25F72D7AB86CC4CA4850C82F811138293A9B737C8EA44C66BE3B27488DF04317AD862231EF9295CAE977BF86ADBB905DB16E63162F006674BD253EDB866B650
- '%TEMP%\1.tmp' --ping<Full path to file> F25F72D7AB86CC4CA4850C82F811138293A9B737C8EA44C66BE3B27488DF04317AD862231EF9295CAE977BF86ADBB905DB16E63162F006674BD253EDB866B650' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde