Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 9BB0698300F603EAFE5D06C8A7E577E7B098343E671DAF505C24EE521D380E2FB5E8BF08EC87ADCD93D14F078F458E9E37BF37543C3C8FEE0997EAA7CA9470C5
- '%TEMP%\1.tmp' --ping<Full path to file> 9BB0698300F603EAFE5D06C8A7E577E7B098343E671DAF505C24EE521D380E2FB5E8BF08EC87ADCD93D14F078F458E9E37BF37543C3C8FEE0997EAA7CA9470C5' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde