Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 50FEC2DB83DD85B53CE398B4AB7D2ECE3F4EAE844B85447F00890DB62E8A4185EE057CCA456B4FD14F46E07D8D58874A829B0D37C951575A7F73777101C9C7EB
- '%TEMP%\1.tmp' --ping<Full path to file> 50FEC2DB83DD85B53CE398B4AB7D2ECE3F4EAE844B85447F00890DB62E8A4185EE057CCA456B4FD14F46E07D8D58874A829B0D37C951575A7F73777101C9C7EB' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde