Technical Information
- %TEMP%\bc66.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\bc66.tmp' --ping<Full path to file> 17F688F3B35DF7CE068E05A594316AEA48F7FEB70E0B3C657B149F4F6D43408A94C2272EE5E824735EC3F91FD912252D5EEDD30F0918FB7E3400C766AF814804
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\bc66.tmp' --ping<Full path to file> 17F688F3B35DF7CE068E05A594316AEA48F7FEB70E0B3C657B149F4F6D43408A94C2272EE5E824735EC3F91FD912252D5EEDD30F0918FB7E3400C766AF814804' (with hidden window)