Technical Information
- %TEMP%\98b6.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\98b6.tmp' --ping<Full path to file> F2E5C859FC2E1740A53CA6FB51300837D8FFC82CEE0D54EA8185012D18908A22DBF7E8BDA851A47F5B70B000ED8523176F23022C179CEC39D9F86A9916C049F6
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\98b6.tmp' --ping<Full path to file> F2E5C859FC2E1740A53CA6FB51300837D8FFC82CEE0D54EA8185012D18908A22DBF7E8BDA851A47F5B70B000ED8523176F23022C179CEC39D9F86A9916C049F6' (with hidden window)