Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 94D56FFF9B97867775A2C43B5EA205D01C6638D9296726EA7F9EBB88C4D22C6206D880B883749E4487C643E62CBC958A4176764C7A142CC6820104F39090335E
- '%TEMP%\1.tmp' --ping<Full path to file> 94D56FFF9B97867775A2C43B5EA205D01C6638D9296726EA7F9EBB88C4D22C6206D880B883749E4487C643E62CBC958A4176764C7A142CC6820104F39090335E' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde