Technical Information
- %TEMP%\5b22.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\5b22.tmp' --ping<Full path to file> 16F8E097A1DD49EC3E3B89A0E8D5009BB1C655EBB052F5AA21B84E2C5A26677BC32BC8B192A8AADEB8414927F9DF6C1CAF41552FF933B1E8EC0373F6D98F8D60
- '%TEMP%\5b22.tmp' --ping<Full path to file> 16F8E097A1DD49EC3E3B89A0E8D5009BB1C655EBB052F5AA21B84E2C5A26677BC32BC8B192A8AADEB8414927F9DF6C1CAF41552FF933B1E8EC0373F6D98F8D60' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"