Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> D4D755565FFB0ED5C2CF2A74E9A199DF391FA5E5DE41F501D612670A908C345F67018EC38CB33DDB40B88E0464D3B1B03CD62D1172459CC69CA58F2979140F9B
- '%TEMP%\1.tmp' --ping<Full path to file> D4D755565FFB0ED5C2CF2A74E9A199DF391FA5E5DE41F501D612670A908C345F67018EC38CB33DDB40B88E0464D3B1B03CD62D1172459CC69CA58F2979140F9B' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde