Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 8FFD89C1EAB95D7287E69D0D936C4DFA70F9570A6F2251B7B73E214CA7F84C407666F0F3CEEFCA963A6BD9B5C2499C59235B13F8D4F451980A4FCC91FA478F84
- '%TEMP%\1.tmp' --ping<Full path to file> 8FFD89C1EAB95D7287E69D0D936C4DFA70F9570A6F2251B7B73E214CA7F84C407666F0F3CEEFCA963A6BD9B5C2499C59235B13F8D4F451980A4FCC91FA478F84' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde