6rVkpNETfwTuXfY.exe "C:\Users\test22\AppData\Local\Temp\6rVkpNETfwTuXfY.exe"
2892cmd.exe /c schtasks /create /F /sc minute /mo 15 /tr "C:\Users\test22\AppData\Local\Temp\6rVkpNETfwTuXfY.exe" /tn "\WindowsAppPool\6rVkpNETfwTuXfY"
2928schtasks.exe schtasks /create /F /sc minute /mo 15 /tr "C:\Users\test22\AppData\Local\Temp\6rVkpNETfwTuXfY.exe" /tn "\WindowsAppPool\6rVkpNETfwTuXfY"
2296AppLaunch.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe"
2180cmd.exe /c schtasks /create /F /sc minute /mo 15 /tr "C:\Users\test22\AppData\Local\Temp\9N3sL7QG3mvcw8U.exe" /tn "\WindowsAppPool\9N3sL7QG3mvcw8U"
3024schtasks.exe schtasks /create /F /sc minute /mo 15 /tr "C:\Users\test22\AppData\Local\Temp\9N3sL7QG3mvcw8U.exe" /tn "\WindowsAppPool\9N3sL7QG3mvcw8U"
2164n1572014.exe C:\Users\test22\AppData\Local\Temp\IXP001.TMP\n1572014.exe
2064AppLaunch.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe"
496