Technical Information
- %TEMP%\a4e6.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '<DNS_SERVER>':53
- DNS ASK fi#####.###tings.services.mozilla.com
- '%TEMP%\a4e6.tmp' --ping<Full path to file> 9B3EF166F2BDEF7FE4AB836AF2D7FB4BE0CFBBDA21E0484CAD34766E7B22EA10ADA36229BAAE5F8CAAF8FD2D13F821045F9A26367EDD076812B284EBC115C383
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\a4e6.tmp' --ping<Full path to file> 9B3EF166F2BDEF7FE4AB836AF2D7FB4BE0CFBBDA21E0484CAD34766E7B22EA10ADA36229BAAE5F8CAAF8FD2D13F821045F9A26367EDD076812B284EBC115C383' (with hidden window)