Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> E04F686AFFC5ADBE3E60F3ECA44D15C1F3B411037B5564548ABE16F11523A8A9196B2F2BC2BA837A0AA9D55314C73550363CD8BE16C1B3748463E6256A924F2D
- '%TEMP%\1.tmp' --ping<Full path to file> E04F686AFFC5ADBE3E60F3ECA44D15C1F3B411037B5564548ABE16F11523A8A9196B2F2BC2BA837A0AA9D55314C73550363CD8BE16C1B3748463E6256A924F2D' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde