Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 4791D867B8606F11C98AB179BB27BE6A9583F5D36B94E55DF222718288D833D91BCE814FFE592870309FE6DD0BEE0062B2FA02E91791E46BB31B0C5095BC8640
- '%TEMP%\1.tmp' --ping<Full path to file> 4791D867B8606F11C98AB179BB27BE6A9583F5D36B94E55DF222718288D833D91BCE814FFE592870309FE6DD0BEE0062B2FA02E91791E46BB31B0C5095BC8640' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde