Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 99170AA0A5262E686A281F669516F3CC65BB0274522AE7E6631D1900C8C97A72F3BEE43D72C6949BE6B0F9A23F2F6187C45E6C6D2E0CA858DBD2ACC9CA6855B5
- '%TEMP%\1.tmp' --ping<Full path to file> 99170AA0A5262E686A281F669516F3CC65BB0274522AE7E6631D1900C8C97A72F3BEE43D72C6949BE6B0F9A23F2F6187C45E6C6D2E0CA858DBD2ACC9CA6855B5' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde