Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> E062706529B3A8E21FAC8B23B1C97549E2299E44AE31F6A90DF8E93D426828B0FD1CDDD41971A461E79DD24D01D9BDC1588FCA1E03E53369A751ED56CD2C1983
- '%TEMP%\1.tmp' --ping<Full path to file> E062706529B3A8E21FAC8B23B1C97549E2299E44AE31F6A90DF8E93D426828B0FD1CDDD41971A461E79DD24D01D9BDC1588FCA1E03E53369A751ED56CD2C1983' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde