Technical Information
- %TEMP%\97f1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- 'co##############e-chains.prod.autograph.services.mozaws.net':443
- DNS ASK co##############e-chains.prod.autograph.services.mozaws.net
- DNS ASK mo#####.map.fastly.net
- '%TEMP%\97f1.tmp' --ping<Full path to file> 06FCBC5F5ED7125656444E0480FD3F1CDAB958B24F072985EB2C624AB3EDE489B3CADA2491F8276E573F0A289CAA3A9DC61B15A6E79431CFB1C62081C5A5B53A
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\97f1.tmp' --ping<Full path to file> 06FCBC5F5ED7125656444E0480FD3F1CDAB958B24F072985EB2C624AB3EDE489B3CADA2491F8276E573F0A289CAA3A9DC61B15A6E79431CFB1C62081C5A5B53A' (with hidden window)
