csc.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\test22\AppData\Local\Temp\3zsbx3ho.cmdline"
2144cvtres.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\test22\AppData\Local\Temp\RESCF70.tmp" "c:\Users\test22\AppData\Local\Temp\CSC6B6C936DC0014B19AFC44CF19EE2BF9.TMP"
2208WMIC.exe "wmic" computersystem get domain
2884