powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy unrestricted -File C:\Users\test22\AppData\Local\Temp\work.txt.ps1
3016replace.exe "C:\Windows\system32\replace.exe" "OEFpSleGvJLReEHDyCQdVRRvZddnYLfmOzaoMyfrleGvJnuIOcOyncGzVOkLzVOkL OEFpS w" leGvJ s
2184replace.exe "C:\Windows\system32\replace.exe" "No files replaced" LReEH c
2276replace.exe "C:\Windows\system32\replace.exe" "No files replaced" DyCQd r
2356replace.exe "C:\Windows\system32\replace.exe" "No files replaced" VRRvZ i
2428replace.exe "C:\Windows\system32\replace.exe" "No files replaced" ddnYL p
1620replace.exe "C:\Windows\system32\replace.exe" "No files replaced" fmOza t
1568replace.exe "C:\Windows\system32\replace.exe" "No files replaced" oMyfr .
2540replace.exe "C:\Windows\system32\replace.exe" "No files replaced" nuIOc h
1720replace.exe "C:\Windows\system32\replace.exe" "No files replaced" OyncG e
1472replace.exe "C:\Windows\system32\replace.exe" "No files replaced" zVOkL l
2536replace.exe "C:\Windows\system32\replace.exe" "No files replaced"
2660