Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 4A62191E38C9EDA2EF5482B611B451FB6CC2E86CE4A4662BEF5D0A8133F3F010FB747BA8A6E7672E738D280C02D68335B786EFB3ADDF6A21491771F464E0B8FB
- '%TEMP%\1.tmp' --ping<Full path to file> 4A62191E38C9EDA2EF5482B611B451FB6CC2E86CE4A4662BEF5D0A8133F3F010FB747BA8A6E7672E738D280C02D68335B786EFB3ADDF6A21491771F464E0B8FB' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde