Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> D5511E172D553275EBBDB87395B8903FFA7315C4D7050EB9691AECF368BBCB2A45DDD351D6EF7C3356D30B3AF92EDA2D379FB75DE9B24F043EF5C1F464A10BF8
- '%TEMP%\1.tmp' --ping<Full path to file> D5511E172D553275EBBDB87395B8903FFA7315C4D7050EB9691AECF368BBCB2A45DDD351D6EF7C3356D30B3AF92EDA2D379FB75DE9B24F043EF5C1F464A10BF8' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde