Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 551328E4E8A51368F450A28DD6EB7535C90592EBE356BE9551770193266926BF7C363383A3CB65BBF893D12D4BF1CB6F0A51015F73C14011E6F65F41BA1845B8
- '%TEMP%\1.tmp' --ping<Full path to file> 551328E4E8A51368F450A28DD6EB7535C90592EBE356BE9551770193266926BF7C363383A3CB65BBF893D12D4BF1CB6F0A51015F73C14011E6F65F41BA1845B8' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde