Technical Information
- %TEMP%\1b54.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- 'mo#####.map.fastly.net':443
- 'co##############e-chains.prod.autograph.services.mozaws.net':443
- DNS ASK mo#####.map.fastly.net
- DNS ASK co##############e-chains.prod.autograph.services.mozaws.net
- '%TEMP%\1b54.tmp' --ping<Full path to file> CD924F7BFD46F7EA1A0FCDDFF4C7B75BD9B4088811D9D00E289AC7CE2074E11CD75958915BA5B45E21160B055DD9EDAA612C8682F0881C5C55E3F5467131EC53
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\1b54.tmp' --ping<Full path to file> CD924F7BFD46F7EA1A0FCDDFF4C7B75BD9B4088811D9D00E289AC7CE2074E11CD75958915BA5B45E21160B055DD9EDAA612C8682F0881C5C55E3F5467131EC53' (with hidden window)