Technical Information
- %TEMP%\d770.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '<DNS_SERVER>':53
- DNS ASK fi#####.###tings.services.mozilla.com
- '%TEMP%\d770.tmp' --ping<Full path to file> A7FB369A5C20EA320C1290667685DC524C41B4FFAD10696E6E6017D869314D68505C70CD3BE208433678B20FE26CACC0EBA525F4A813C17BD9368728D6E3C43C
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\d770.tmp' --ping<Full path to file> A7FB369A5C20EA320C1290667685DC524C41B4FFAD10696E6E6017D869314D68505C70CD3BE208433678B20FE26CACC0EBA525F4A813C17BD9368728D6E3C43C' (with hidden window)