Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 9DDFB4446B7D728FA97EC1E1C52E6001418EA13B90011F9FA590BF9C4BD490EE1F902CBFD2DB4667151F54F7245FDF66035BBA62227DC2E8079656CA4B068E2B
- '%TEMP%\1.tmp' --ping<Full path to file> 9DDFB4446B7D728FA97EC1E1C52E6001418EA13B90011F9FA590BF9C4BD490EE1F902CBFD2DB4667151F54F7245FDF66035BBA62227DC2E8079656CA4B068E2B' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde