Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 7C817EABFCFF4AFE6FC30AB6BDB0960E943EA9714D9918EACEBA3E3918DB25AA956A2AC62ABDF89E5E8386E9267EE263924354191CF3C3FEFB85F8E4DB5A3A2B
- '%TEMP%\1.tmp' --ping<Full path to file> 7C817EABFCFF4AFE6FC30AB6BDB0960E943EA9714D9918EACEBA3E3918DB25AA956A2AC62ABDF89E5E8386E9267EE263924354191CF3C3FEFB85F8E4DB5A3A2B' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde