cmd.exe "C:\Windows\System32\cmd.exe" /c start /wait "rWzKnoaMZVOkFHg" C:\Users\test22\AppData\Local\Temp\BRDbdWBB.bat
1208cscript.exe cscript x.js
2212MEMZ.exe "C:\Users\test22\AppData\Roaming\MEMZ.exe"
2404explorer.exe C:\Windows\Explorer.EXE
1236