Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> FA8A00834DFBB98181C544ACAD7395263907B9080C4DE3E03F786EEBFA8ACB1AA1648227A38A83022EFD6D21053D5DD258444E582B5C0476F327804C9A86D854
- '%TEMP%\1.tmp' --ping<Full path to file> FA8A00834DFBB98181C544ACAD7395263907B9080C4DE3E03F786EEBFA8ACB1AA1648227A38A83022EFD6D21053D5DD258444E582B5C0476F327804C9A86D854' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde