Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> CE18300096C46CE828E66582FF7DF17D58D3FCF29BBFC71044E21E30819106F56FC2C74452D883CF30E704B7B6E08BE8601B12D01AAB86D13031F7F9EE544EE3
- '%TEMP%\1.tmp' --ping<Full path to file> CE18300096C46CE828E66582FF7DF17D58D3FCF29BBFC71044E21E30819106F56FC2C74452D883CF30E704B7B6E08BE8601B12D01AAB86D13031F7F9EE544EE3' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde