Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> F5529153F0D2D36CBBB31CAFC85B769C3C06816B805D51AF877561E2FEB0B4ADDE0CB42E28447191D688B4F15356F5ABA232461C9A1A491BD4E078F26E13AD18
- '%TEMP%\1.tmp' --ping<Full path to file> F5529153F0D2D36CBBB31CAFC85B769C3C06816B805D51AF877561E2FEB0B4ADDE0CB42E28447191D688B4F15356F5ABA232461C9A1A491BD4E078F26E13AD18' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde