Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 350008AE09A4C08A69E52C8B0500BBC79AD3881C55AD2050D7B2DBD1A320C11CAD46B4113FB6535608D046B2A6839ACCCE2261FA8C61DCB280AF755A6CC3475A
- '%TEMP%\1.tmp' --ping<Full path to file> 350008AE09A4C08A69E52C8B0500BBC79AD3881C55AD2050D7B2DBD1A320C11CAD46B4113FB6535608D046B2A6839ACCCE2261FA8C61DCB280AF755A6CC3475A' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde