Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> C6EFDA9C5C41B6C654C5951D35B44FB43545E09C70F486458A29085056C620D92D086FC1FAB01CAA3C8F09F140D2DB965A5E486AA0874FB5CDCC991537E306CC
- '%TEMP%\1.tmp' --ping<Full path to file> C6EFDA9C5C41B6C654C5951D35B44FB43545E09C70F486458A29085056C620D92D086FC1FAB01CAA3C8F09F140D2DB965A5E486AA0874FB5CDCC991537E306CC' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde