Technical Information
- %TEMP%\265b.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- 'co##############e-chains.prod.autograph.services.mozaws.net':443
- 'mo#####.map.fastly.net':443
- DNS ASK co##############e-chains.prod.autograph.services.mozaws.net
- DNS ASK mo#####.map.fastly.net
- '%TEMP%\265b.tmp' --ping<Full path to file> ABA5B078888087AE0AD6918E4DFA01A5D79D1D6E4903815DB4666059B7F999587A2F010CFE55E0060AEFEEAEEBDAE81E2F875797432ADA42A6A8321191F481D2
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\265b.tmp' --ping<Full path to file> ABA5B078888087AE0AD6918E4DFA01A5D79D1D6E4903815DB4666059B7F999587A2F010CFE55E0060AEFEEAEEBDAE81E2F875797432ADA42A6A8321191F481D2' (with hidden window)
