Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 302A93E42494D9B589AD3C47816EBF0A526992E62ABA4E50A8DA9DB2B91D0B5272AC822095034535F741EF3BE7C79695F37AF9E58D27BA632D9B01901D994DEC
- '%TEMP%\1.tmp' --ping<Full path to file> 302A93E42494D9B589AD3C47816EBF0A526992E62ABA4E50A8DA9DB2B91D0B5272AC822095034535F741EF3BE7C79695F37AF9E58D27BA632D9B01901D994DEC' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde