Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 24DF679DE1AD3ADC3B8A2925F1AA9775527E50DFB916DDC027D609B19219AEFFEE6205788B96E1242EE20F2BDD5DCEDCA3F5EC428499FFBE27706E3798296EAA
- '%TEMP%\1.tmp' --ping<Full path to file> 24DF679DE1AD3ADC3B8A2925F1AA9775527E50DFB916DDC027D609B19219AEFFEE6205788B96E1242EE20F2BDD5DCEDCA3F5EC428499FFBE27706E3798296EAA' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde