Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 7D3DB47A150C3FAB185FC54202410A46B2D4F8C44B05598386E7CBAEE0E1B72E2CB2A976D3150DF9E14E35BDFB790D9A341A24722B674AE7C792507195581FB1
- '%TEMP%\1.tmp' --ping<Full path to file> 7D3DB47A150C3FAB185FC54202410A46B2D4F8C44B05598386E7CBAEE0E1B72E2CB2A976D3150DF9E14E35BDFB790D9A341A24722B674AE7C792507195581FB1' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde