Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 152F03F17A827CD1C6439671D3FDA364915B379B581B2792DA00FDED6DD04C7CD8CAD1455A3D958C9F9DF7AC157295E1CF7C24A2BADEE21407BED5D526183382
- '%TEMP%\1.tmp' --ping<Full path to file> 152F03F17A827CD1C6439671D3FDA364915B379B581B2792DA00FDED6DD04C7CD8CAD1455A3D958C9F9DF7AC157295E1CF7C24A2BADEE21407BED5D526183382' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde