Technical Information
- %TEMP%\1d38.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1d38.tmp' --ping<Full path to file> D9018DFE8B0705D18E03A7BF7C2ECE12AC4829F7D966B7B084C86D4CB70C50955C94012F7CD66049B16C31480F58828AB8B325F9823C44CCB20A334257CA9AB6
- '%TEMP%\1d38.tmp' --ping<Full path to file> D9018DFE8B0705D18E03A7BF7C2ECE12AC4829F7D966B7B084C86D4CB70C50955C94012F7CD66049B16C31480F58828AB8B325F9823C44CCB20A334257CA9AB6' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"