Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 56CC7514AF782E1BDF2D96A21FBF12485EDC256D04DA904A7646A7FDA1C0CFD175B37C3F2785592FC7C564217D82A5461F1122A195D5888D2DBEDF934C2E8876
- '%TEMP%\1.tmp' --ping<Full path to file> 56CC7514AF782E1BDF2D96A21FBF12485EDC256D04DA904A7646A7FDA1C0CFD175B37C3F2785592FC7C564217D82A5461F1122A195D5888D2DBEDF934C2E8876' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde