Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 1B00FCBBA189F405B09AE538399824356924A7070E1E6F08E76EC55E4EC646CDD4B3725415742FA1821D9131C3652F0C3A73E0B8923A28304BB8E95E441B1880
- '%TEMP%\1.tmp' --ping<Full path to file> 1B00FCBBA189F405B09AE538399824356924A7070E1E6F08E76EC55E4EC646CDD4B3725415742FA1821D9131C3652F0C3A73E0B8923A28304BB8E95E441B1880' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde