Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 81DBB115F0BA97F4FE66305E6F85E5B33051D1A4DCAF95CA7E3FCF225968E4ED69CBD03389CD8452723A95BFA33DCA1716FA40862E0BACB6F5C56079061AE798
- '%TEMP%\1.tmp' --ping<Full path to file> 81DBB115F0BA97F4FE66305E6F85E5B33051D1A4DCAF95CA7E3FCF225968E4ED69CBD03389CD8452723A95BFA33DCA1716FA40862E0BACB6F5C56079061AE798' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde