Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 09DC6A2A5A0D2276F853BD3F6AA4571222A439880074E89291D7CC8B72871A1DC1E97B80F1EE1F2BB77CC24452A6F620C6F7ED2AE07CC02503BFD30DE2E99E42
- '%TEMP%\1.tmp' --ping<Full path to file> 09DC6A2A5A0D2276F853BD3F6AA4571222A439880074E89291D7CC8B72871A1DC1E97B80F1EE1F2BB77CC24452A6F620C6F7ED2AE07CC02503BFD30DE2E99E42' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde