Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> B8DE1655E11E1A8F73259AF9EA3692F42744AF583A82CA61CC88B1F7CD581723CA933A14C4330D0050931737E877994AF372A62826FFDF4FF563F121E371E8AF
- '%TEMP%\1.tmp' --ping<Full path to file> B8DE1655E11E1A8F73259AF9EA3692F42744AF583A82CA61CC88B1F7CD581723CA933A14C4330D0050931737E877994AF372A62826FFDF4FF563F121E371E8AF' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde