Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> DBA8271501F247569639C85914D0308A2C304DC36F2E052111B67F819E18A610490F7159FC199B8D7C7EF7E5CCE15C063A029BFF720F35D8509754C11723FB0D
- '%TEMP%\1.tmp' --ping<Full path to file> DBA8271501F247569639C85914D0308A2C304DC36F2E052111B67F819E18A610490F7159FC199B8D7C7EF7E5CCE15C063A029BFF720F35D8509754C11723FB0D' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde