Goodgirlsbadguys.com (213.155.12.144) is a domain registered on July 19 2010 with a registrant address listed in Cambodia. Visiting a particular webpage for that domain (trust me and don’t go there) returns a URL as part of an iframe. Microsoft Help and Support Center is invoked with a few parameters, one of which is the URL obtained earlier. Later, the command line utility is invoked to run scriptand kill Windows Media Player.”]
Source: https://blog.talosintelligence.com/2010/08/quick-analysis-of-webpage-leveraging.html