Technical Information
- %TEMP%\post-process.txt
- %TEMP%\post-process.txt
- '<LOCALNET>.15.1':1288
- 'co##.cemei.fr':80
- http://co##.cemei.fr/step/2633/abort/31662?st#####################################################################
- DNS ASK co##.cemei.fr
- DNS ASK re####tecalcul.net
- ClassName: 'DDEMLMom' WindowName: ''
- ClassName: 'IEFrame' WindowName: ''
- ClassName: 'Static' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
- '%WINDIR%\syswow64\cscript.exe' /E:JScript /B "%TEMP%\post-process.txt" "<Full path to file>"
- '%WINDIR%\syswow64\cscript.exe' /E:JScript /B "%TEMP%\post-process.txt" "<Full path to file>"' (with hidden window)
- '%WINDIR%\syswow64\rundll32.exe' url.dll,FileProtocolHandler http://co##.cemei.fr/step/2633/abort/31662?st#####################################################################