Technical Information
- %TEMP%\bbc0.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\bbc0.tmp' --ping<Full path to file> B936C41DD576A6D3339B82221020A6B37A866F50CE78842757EA93DE2A20C19370B4F1CEC03D9CAEEF6F4051AED8EFA72FE796715CAF523DA735D394278BF728
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\bbc0.tmp' --ping<Full path to file> B936C41DD576A6D3339B82221020A6B37A866F50CE78842757EA93DE2A20C19370B4F1CEC03D9CAEEF6F4051AED8EFA72FE796715CAF523DA735D394278BF728' (with hidden window)