Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 25945E69BA6F1A33E4F6822A025AA67CC87CA4992C54DB5A19ABA687AFF53358C1F4DAB15A027FE1CE6A2B3C1B558CE921104E4AB3214C1E102EF76164BFDB30
- '%TEMP%\1.tmp' --ping<Full path to file> 25945E69BA6F1A33E4F6822A025AA67CC87CA4992C54DB5A19ABA687AFF53358C1F4DAB15A027FE1CE6A2B3C1B558CE921104E4AB3214C1E102EF76164BFDB30' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde