Technical Information
- %TEMP%\f6fe.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\f6fe.tmp' --ping<Full path to file> 8791067BAAA25A2BB73F27F59096882140810E742A59DF9BD1EB17DDE898386E93012F6034232AEEBB4DB5BE05C8574C2EA6B8C394ACE91B34EB208D0B78D4A8
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\f6fe.tmp' --ping<Full path to file> 8791067BAAA25A2BB73F27F59096882140810E742A59DF9BD1EB17DDE898386E93012F6034232AEEBB4DB5BE05C8574C2EA6B8C394ACE91B34EB208D0B78D4A8' (with hidden window)