Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> D1A1EBC410B065BB7EA337F86E0D601F3A69122E2027017579001A34317865C9DDFB3D93735359B8A74250C7ED85FF99B155AF01FE6134FD6AE87779DA2013BB
- '%TEMP%\1.tmp' --ping<Full path to file> D1A1EBC410B065BB7EA337F86E0D601F3A69122E2027017579001A34317865C9DDFB3D93735359B8A74250C7ED85FF99B155AF01FE6134FD6AE87779DA2013BB' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde