Technical Information
- %TEMP%\ba2a.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\ba2a.tmp' --ping<Full path to file> 06ECE57F4AD4CF5D706316CA393623C5B2331B7D0CC455244C702F2E7AC38242CD839071D157462CE266F7028865199F04FF526FB13169E08A8F768FA4B82BB6
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\ba2a.tmp' --ping<Full path to file> 06ECE57F4AD4CF5D706316CA393623C5B2331B7D0CC455244C702F2E7AC38242CD839071D157462CE266F7028865199F04FF526FB13169E08A8F768FA4B82BB6' (with hidden window)