962989261e135f16576fd017c73b4dcc8a079410c99f2921e3557667fa492d7f.exe "C:\Users\Administrator\AppData\Local\Temp\962989261e135f16576fd017c73b4dcc8a079410c99f2921e3557667fa492d7f.exe"
2628962989261e135f16576fd017c73b4dcc8a079410c99f2921e3557667fa492d7f.exe C:\Users\Administrator\AppData\Local\Temp\962989261e135f16576fd017c73b4dcc8a079410c99f2921e3557667fa492d7f.exe /C
552cmd.exe "C:\Windows\System32\cmd.exe" /c ping.exe -n 6 127.0.0.1 & type "C:\Windows\System32\calc.exe" > "C:\Users\Administrator\AppData\Local\Temp\962989261e135f16576fd017c73b4dcc8a079410c99f2921e3557667fa492d7f.exe"
2136PING.EXE ping.exe -n 6 127.0.0.1
2560