mwsM5Tr24jkiooA.exe "C:\Users\test22\AppData\Local\Temp\mwsM5Tr24jkiooA.exe"
2228AppLaunch.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe"
1792cmd.exe /c schtasks /create /F /sc minute /mo 15 /tr "C:\Users\test22\AppData\Local\Temp\mwsM5Tr24jkiooA.exe" /tn "\WindowsAppPool\mwsM5Tr24jkiooA"
2360schtasks.exe schtasks /create /F /sc minute /mo 15 /tr "C:\Users\test22\AppData\Local\Temp\mwsM5Tr24jkiooA.exe" /tn "\WindowsAppPool\mwsM5Tr24jkiooA"
2720cmd.exe /c schtasks /create /F /sc minute /mo 15 /tr "C:\Users\test22\AppData\Local\Temp\pn4nWdEPo9X0tKx.exe" /tn "\WindowsAppPool\pn4nWdEPo9X0tKx"
2564schtasks.exe schtasks /create /F /sc minute /mo 15 /tr "C:\Users\test22\AppData\Local\Temp\pn4nWdEPo9X0tKx.exe" /tn "\WindowsAppPool\pn4nWdEPo9X0tKx"
2368h2166154.exe C:\Users\test22\AppData\Local\Temp\IXP003.TMP\h2166154.exe
2908i5346150.exe C:\Users\test22\AppData\Local\Temp\IXP002.TMP\i5346150.exe
1336AppLaunch.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe"
2812