Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> 69BD8897AC889078E6F7AA2C2A65215ABAB27614DDCFCF954F9E7C7C88129FB20817FEF0ADAAEDF60E053CC3A9586B3D6901C6F349C25E9234D463ACA73A1D63
- '%TEMP%\1.tmp' --ping<Full path to file> 69BD8897AC889078E6F7AA2C2A65215ABAB27614DDCFCF954F9E7C7C88129FB20817FEF0ADAAEDF60E053CC3A9586B3D6901C6F349C25E9234D463ACA73A1D63' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde