Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> E476E4FFAEAFC3CC8BAAD507D72F98B8AC574FB8DC6A22BD83AE51240AC2AC3A4A1C66F2E743413547FA85528594B84A42E0BB963A75FC975878910CB87A05B6
- '%TEMP%\1.tmp' --ping<Full path to file> E476E4FFAEAFC3CC8BAAD507D72F98B8AC574FB8DC6A22BD83AE51240AC2AC3A4A1C66F2E743413547FA85528594B84A42E0BB963A75FC975878910CB87A05B6' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde