loader.exe "C:\Users\test22\AppData\Local\Temp\loader.exe"
cmd.exe cmd.exe /c "payload.bat"
cmd.exe C:\Windows\system32\cmd.exe /c wmic path Win32_PointingDevice get PNPDeviceID /value | find "PNPDeviceID"
WMIC.exe wmic path Win32_PointingDevice get PNPDeviceID /value
find.exe find "PNPDeviceID"
No process loaded Click on a process in the tree above to load its data.