Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 273D69531537607ED15941B24392BC6A7FB98CD3A8C196F2865D86BC95BE68F4D61EAEC3CA34F403EE4B7B773B5659CA555697B783AEC44E60A4A77681102AE6
- '%TEMP%\1.tmp' --ping<Full path to file> 273D69531537607ED15941B24392BC6A7FB98CD3A8C196F2865D86BC95BE68F4D61EAEC3CA34F403EE4B7B773B5659CA555697B783AEC44E60A4A77681102AE6' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde