Technical Information
- %TEMP%\e5fb.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- 'mo#####.map.fastly.net':443
- 'co##############e-chains.prod.autograph.services.mozaws.net':443
- DNS ASK mo#####.map.fastly.net
- DNS ASK co##############e-chains.prod.autograph.services.mozaws.net
- '%TEMP%\e5fb.tmp' --ping<Full path to file> D4A92F485021EED9EE95F446461EA671E36060F23E9F2320CF8EFD2360075054074B04C938A4B2F648B969D3532430279849BA19E498FA5F96E5C18C170797D7
- '%ProgramFiles(x86)%\microsoft office\office16\winword.exe' /n "<PATH_SAMPLE>.docx" /o ""
- '%TEMP%\e5fb.tmp' --ping<Full path to file> D4A92F485021EED9EE95F446461EA671E36060F23E9F2320CF8EFD2360075054074B04C938A4B2F648B969D3532430279849BA19E498FA5F96E5C18C170797D7' (with hidden window)