Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> DAB82DBB314303174AA683633A3EDA20E43FE6CDF1B1F35A5AEF817BF7777BB51788301285E81651854A5340BC18C532029FE8D84C5C340312502B204DDD486A
- '%TEMP%\1.tmp' --ping<Full path to file> DAB82DBB314303174AA683633A3EDA20E43FE6CDF1B1F35A5AEF817BF7777BB51788301285E81651854A5340BC18C532029FE8D84C5C340312502B204DDD486A' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde