Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 21B0063F048BBB9CD19E4F53188D41D13B5AF4F8F057B2BC6938146C6B5AE140EC2F74322CF29BB25B2C1E929F298BB8FBB0E26D27395472940C72DB5FF977D2
- '%TEMP%\1.tmp' --ping<Full path to file> 21B0063F048BBB9CD19E4F53188D41D13B5AF4F8F057B2BC6938146C6B5AE140EC2F74322CF29BB25B2C1E929F298BB8FBB0E26D27395472940C72DB5FF977D2' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde