Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 02362E75D1A3842E76E56221D86A5A0AFD0BC5CAE73F055234B4258C964556C68C09CA8F6F6AE81889C818412032E57E6904C96DDDE256126253DD10857A68B2
- '%TEMP%\1.tmp' --ping<Full path to file> 02362E75D1A3842E76E56221D86A5A0AFD0BC5CAE73F055234B4258C964556C68C09CA8F6F6AE81889C818412032E57E6904C96DDDE256126253DD10857A68B2' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde