Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> E3BCBAC452A03752F06829484DB27CE293F43AA02395B8F1AA56284D91782D171C5C17FA7D011BA301F3F694F123CBEB9D34565B357C7CFA34D1BE4C22F39A11
- '%TEMP%\1.tmp' --ping<Full path to file> E3BCBAC452A03752F06829484DB27CE293F43AA02395B8F1AA56284D91782D171C5C17FA7D011BA301F3F694F123CBEB9D34565B357C7CFA34D1BE4C22F39A11' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde