Ursnif memory strings to look for

https://twitter.com/james_inthe_box/status/984443495711559681?s=21

Strings to look for in memory for #ursnif

type=%u&soft=%u&version=%u&user=%08x%08x%08x%08x&group=%u&id=%x&arc=%u&crc=%08x&uptime=%u