Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> DBE1A6E7BB5D68F15DE658E55D2C6D328AE4408717C631913BA10529DF4F5F348C26D0276E76FB03412B930125E6A6A07224C7E4FA8D1EAC11D5308192FBBFF2
- '%TEMP%\1.tmp' --ping<Full path to file> DBE1A6E7BB5D68F15DE658E55D2C6D328AE4408717C631913BA10529DF4F5F348C26D0276E76FB03412B930125E6A6A07224C7E4FA8D1EAC11D5308192FBBFF2' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde