powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ENC cwB0AGEAcgB0AC0AcwBsAGUAZQBwACAALQBzAGUAYwBvAG4AZABzACAAMwA1AA==
2176vbc.exe C:\Users\test22\AppData\Local\Temp\vbc.exe /stext "C:\Users\test22\AppData\Local\Temp\nxxutflzcrhvnwu"
2940vbc.exe C:\Users\test22\AppData\Local\Temp\vbc.exe /stext "C:\Users\test22\AppData\Local\Temp\yrlnuywbyzzzxcienn"
3000vbc.exe C:\Users\test22\AppData\Local\Temp\vbc.exe /stext "C:\Users\test22\AppData\Local\Temp\itqfuqhumhrezieieylwm"
3064vbc.exe C:\Users\test22\AppData\Local\Temp\vbc.exe /stext "C:\Users\test22\AppData\Local\Temp\ciexrpbgze"
2256vbc.exe C:\Users\test22\AppData\Local\Temp\vbc.exe /stext "C:\Users\test22\AppData\Local\Temp\fdrhriminmnkw"
2056vbc.exe C:\Users\test22\AppData\Local\Temp\vbc.exe /stext "C:\Users\test22\AppData\Local\Temp\pfxasawbbufpydtey"
2548