Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 1E472F55C369710FF67FD282D471A359B21D88A36DDAC025F53E8D2D1BD7ED636359E7B3EA517145D2AD02125474EC7368B95AA7E042EA86EE2021101343EB9A
- '%TEMP%\1.tmp' --ping<Full path to file> 1E472F55C369710FF67FD282D471A359B21D88A36DDAC025F53E8D2D1BD7ED636359E7B3EA517145D2AD02125474EC7368B95AA7E042EA86EE2021101343EB9A' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde