Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> FE93A44E4F53AD0CA0D4672BAB3EF4061BB335BAB7010028AA5906919EEA701E4D7ECE066C16F033643FF0557DA13A0CEDCD41265F3604D62836D07292CA0ADA
- '%TEMP%\1.tmp' --ping<Full path to file> FE93A44E4F53AD0CA0D4672BAB3EF4061BB335BAB7010028AA5906919EEA701E4D7ECE066C16F033643FF0557DA13A0CEDCD41265F3604D62836D07292CA0ADA' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde