Technical Information
- %TEMP%\8d19.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- DNS ASK fi#####.###tings.services.mozilla.com
- DNS ASK ne###.##ficeapps.live.com
- '%TEMP%\8d19.tmp' --ping<Full path to file> 4EB8022B4A3CE6A6EDA927B8E7823E3D16A8108AAC6134A3184BE2A610B47EA4DF19E781DE99356A40DCA2E7224DDCFE1099600CA9093AE74B532D682C4BC9A9
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\8d19.tmp' --ping<Full path to file> 4EB8022B4A3CE6A6EDA927B8E7823E3D16A8108AAC6134A3184BE2A610B47EA4DF19E781DE99356A40DCA2E7224DDCFE1099600CA9093AE74B532D682C4BC9A9' (with hidden window)