Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> F083BC19485B6EADFC4BB86E6AFD7C2CE5F9DB0C0804408880E77EC5024935A45C7FD94E8C779316BD79C10CA48045E82ECE5929E6616852E857E403685D3932
- '%TEMP%\1.tmp' --ping<Full path to file> F083BC19485B6EADFC4BB86E6AFD7C2CE5F9DB0C0804408880E77EC5024935A45C7FD94E8C779316BD79C10CA48045E82ECE5929E6616852E857E403685D3932' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde