Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 3B5831CB56BD4FC590AE36D61BDA86BCE7A01C6270A71E691F124D04DB8BAA148D77F81CAD9D655F1FA4620E005FF8F124D0571B1CE193EEEA8B754002538E99
- '%TEMP%\1.tmp' --ping<Full path to file> 3B5831CB56BD4FC590AE36D61BDA86BCE7A01C6270A71E691F124D04DB8BAA148D77F81CAD9D655F1FA4620E005FF8F124D0571B1CE193EEEA8B754002538E99' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde