Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 734E0015DA3984E86E80131D732C2F540EE0D88CF4CA1CE45BB88CB11BA8CF801BC7A04F20E1F015D4D43F3014D9BD629007427558CC1FAEDDCA6DFA4C44449B
- '%TEMP%\1.tmp' --ping<Full path to file> 734E0015DA3984E86E80131D732C2F540EE0D88CF4CA1CE45BB88CB11BA8CF801BC7A04F20E1F015D4D43F3014D9BD629007427558CC1FAEDDCA6DFA4C44449B' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde