Technical Information
- %TEMP%\da86.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\da86.tmp' --ping<Full path to file> 858CA0BDA409DC2F5751B09FF4A806F444F2FB2DF829939076E7A2F2AE1A7801AA4C1A59923D528D22826963546AC27889BE7DC0ABC8D206066FF284AF7CB4E3
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\da86.tmp' --ping<Full path to file> 858CA0BDA409DC2F5751B09FF4A806F444F2FB2DF829939076E7A2F2AE1A7801AA4C1A59923D528D22826963546AC27889BE7DC0ABC8D206066FF284AF7CB4E3' (with hidden window)