Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 2083A5F2EDB04514B69C172A75367FDB838E40F8CCF2D705BACA56C61E7015585F881157C1DD506D3F6588EA81F903F221326EE5982E546945D82212E98E0667
- '%TEMP%\1.tmp' --ping<Full path to file> 2083A5F2EDB04514B69C172A75367FDB838E40F8CCF2D705BACA56C61E7015585F881157C1DD506D3F6588EA81F903F221326EE5982E546945D82212E98E0667' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde