Technical Information
- %TEMP%\4e0.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- DNS ASK co##############e-chains.prod.autograph.services.mozaws.net
- '%TEMP%\4e0.tmp' --ping<Full path to file> 9368C5EC7F5B20D7FB9A3837A026D0D8E52FDA7C574E3A5B9212B1DDF6917358FA848FE33A841AF988DEFDB33DA158C51AC17CE641141252D27F02C41E2EFCF8
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\4e0.tmp' --ping<Full path to file> 9368C5EC7F5B20D7FB9A3837A026D0D8E52FDA7C574E3A5B9212B1DDF6917358FA848FE33A841AF988DEFDB33DA158C51AC17CE641141252D27F02C41E2EFCF8' (with hidden window)