Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 55DA6CB5B0828857B8BA1637CB3BE6D4956FFCA56676735F318C4442B87169E46B4836215C28107B1E63E51BC574355373D2D89D411D951F1BCEE2880B3D73E7
- '%TEMP%\1.tmp' --ping<Full path to file> 55DA6CB5B0828857B8BA1637CB3BE6D4956FFCA56676735F318C4442B87169E46B4836215C28107B1E63E51BC574355373D2D89D411D951F1BCEE2880B3D73E7' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde