Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 34E6FC15B9162E81750420FC3CFBB11B58109A6B341542745CA1797BB8AB8D16AA222090C075A027AC171FE7D6270298CBBEE5F55C7703CBED5D7EDFF10F9902
- '%TEMP%\1.tmp' --ping<Full path to file> 34E6FC15B9162E81750420FC3CFBB11B58109A6B341542745CA1797BB8AB8D16AA222090C075A027AC171FE7D6270298CBBEE5F55C7703CBED5D7EDFF10F9902' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde