powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy unrestricted -File C:\Users\test22\AppData\Local\Temp\one1.txt.ps1
3024replace.exe "C:\Windows\system32\replace.exe" "OEFpSleGvJLReEHDyCQdVRRvZddnYLfmOzaoMyfrleGvJnuIOcOyncGzVOkLzVOkL OEFpS w" leGvJ s
2188replace.exe "C:\Windows\system32\replace.exe" "No files replaced" LReEH c
2268replace.exe "C:\Windows\system32\replace.exe" "No files replaced" DyCQd r
2360replace.exe "C:\Windows\system32\replace.exe" "No files replaced" VRRvZ i
2376replace.exe "C:\Windows\system32\replace.exe" "No files replaced" ddnYL p
1648replace.exe "C:\Windows\system32\replace.exe" "No files replaced" fmOza t
1604replace.exe "C:\Windows\system32\replace.exe" "No files replaced" oMyfr .
1164replace.exe "C:\Windows\system32\replace.exe" "No files replaced" nuIOc h
1720replace.exe "C:\Windows\system32\replace.exe" "No files replaced" OyncG e
1472replace.exe "C:\Windows\system32\replace.exe" "No files replaced" zVOkL l
2128replace.exe "C:\Windows\system32\replace.exe" "No files replaced"
2576