Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> D96154026BCB6FC1034380496529059F0CF314F365B4E084F86C92350A4E1FE222295AD842DC37A70D65EC497D8879A77446BF09F7C1BAE1B2FC696F798BC2AC
- '%TEMP%\1.tmp' --ping<Full path to file> D96154026BCB6FC1034380496529059F0CF314F365B4E084F86C92350A4E1FE222295AD842DC37A70D65EC497D8879A77446BF09F7C1BAE1B2FC696F798BC2AC' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde