Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 351442B7C26056FF044D7BDB9C51CD6C6982D5394DA0A376D799F2DABDECB953039863EFF1B77ECFFD1D2AC4C487CF3BFD5771B955CCDDE05262C46F0DF54B93
- '%TEMP%\1.tmp' --ping<Full path to file> 351442B7C26056FF044D7BDB9C51CD6C6982D5394DA0A376D799F2DABDECB953039863EFF1B77ECFFD1D2AC4C487CF3BFD5771B955CCDDE05262C46F0DF54B93' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde