Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> FC286A10BAF6C24E35626631E01B4A846BD34A1943BA2D0CAA1C18CD432312DABC3B289B64CAE97D84533234AF743BE07033EA3808D893D90CA9D951A4D68F8F
- '%TEMP%\1.tmp' --ping<Full path to file> FC286A10BAF6C24E35626631E01B4A846BD34A1943BA2D0CAA1C18CD432312DABC3B289B64CAE97D84533234AF743BE07033EA3808D893D90CA9D951A4D68F8F' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde