4.exe "C:\Users\test22\AppData\Local\Temp\New Feature\4.exe"
5292makecab.exe "C:\Windows\System32\makecab.exe"
8232makecab.exe "C:\Windows\System32\makecab.exe"
3800makecab.exe "C:\Windows\System32\makecab.exe"
3752makecab.exe "C:\Windows\System32\makecab.exe"
5332makecab.exe "C:\Windows\System32\makecab.exe"
8084makecab.exe "C:\Windows\System32\makecab.exe"
6568makecab.exe "C:\Windows\System32\makecab.exe"
6696findstr.exe findstr /V /R "^NfIeItKcjkOKepYZCKFMkXrWzIisyYsXhQiMykUBGlqQrbUBrzKTMfJQkLIqWadhUQvkejTdQtuqWhTWOFgLgbkYudAzCUEhUMWjqInRmzrHoJTYSLjdtEYvFnyLLmOVmSupsGWyibjVxDPb$" Notti.eps
4788Nobile.exe.com C:\Users\test22\AppData\Roaming\GcyTFWdPMenYYzQBBj\Nobile.exe.com m
9112PING.EXE ping 127.0.0.1 -n 30
5596