cmd.exe "C:\Windows\System32\cmd.exe" /c start /wait "bRWLJrDhHWjTgELV" C:\Users\ADMINI~1\AppData\Local\Temp\33a0a4fd2895d8118443fb8fae4ac9ca93b3a3cb1c10791d983e16644940411d
2560rundll32.exe "C:\Windows\system32\rundll32.exe" C:\Windows\system32\shell32.dll,OpenAs_RunDLL C:\Users\ADMINI~1\AppData\Local\Temp\33a0a4fd2895d8118443fb8fae4ac9ca93b3a3cb1c10791d983e16644940411d
1304