Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> B2FA062B9F571E0D520EA638937A05622D586B84212AD5DAE8AA4461171B2CDC9D071E40A483EB00640B36D9FC71725B0B4B735828FFAAA69A39394E09C346DC
- '%TEMP%\1.tmp' --ping<Full path to file> B2FA062B9F571E0D520EA638937A05622D586B84212AD5DAE8AA4461171B2CDC9D071E40A483EB00640B36D9FC71725B0B4B735828FFAAA69A39394E09C346DC' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde