Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> E55DE6FC1A2A379CF15383C975EF3D4FFA685E28C3F097875A42C0200F651127BC23CFC7C1B3F4522A11AD8A3DF537DFE0FEC1E2EC4C1BF3B59873D6C77CDE03
- '%TEMP%\1.tmp' --ping<Full path to file> E55DE6FC1A2A379CF15383C975EF3D4FFA685E28C3F097875A42C0200F651127BC23CFC7C1B3F4522A11AD8A3DF537DFE0FEC1E2EC4C1BF3B59873D6C77CDE03' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde