Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 2D262D8BABA72D343FE4C6719584797A7FFE6C25E62FC911DAA918C51708B54A207ADF0D8E99B270C89BAF9ADDF86A36D9B9B6ACCC8B32EC8C23ECBD8D0183B1
- '%TEMP%\1.tmp' --ping<Full path to file> 2D262D8BABA72D343FE4C6719584797A7FFE6C25E62FC911DAA918C51708B54A207ADF0D8E99B270C89BAF9ADDF86A36D9B9B6ACCC8B32EC8C23ECBD8D0183B1' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde