Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> A60FD6F96F517F2AAFC615C77E7CC5D80FCDDAA4176E1A42F2DA9FD7432EFAD564741995E5BB858C29531E9ED0D65E76A8EB69CBFF61C9F7992B2C965CDE0CEE
- '%TEMP%\1.tmp' --ping<Full path to file> A60FD6F96F517F2AAFC615C77E7CC5D80FCDDAA4176E1A42F2DA9FD7432EFAD564741995E5BB858C29531E9ED0D65E76A8EB69CBFF61C9F7992B2C965CDE0CEE' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde