Technical Information
- [HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4] '1400' = '00000003'
- [HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4] '1C00' = '00000000'
- %TEMP%\da95.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\da95.tmp' --ping<Full path to file> 940C8756F666E3901CEDB398A9554DAE19B869A1371681C1A3C043D70FC68B02CC2F10ECE8C44344E1CF3C8A1DD29E24586FA2ABE9C894787AC16F53AFA9189F
- '%TEMP%\da95.tmp' --ping<Full path to file> 940C8756F666E3901CEDB398A9554DAE19B869A1371681C1A3C043D70FC68B02CC2F10ECE8C44344E1CF3C8A1DD29E24586FA2ABE9C894787AC16F53AFA9189F' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"