bQrq.exe C:\Users\test22\AppData\Local\Temp\bQrq.exe /stext "C:\Users\test22\AppData\Local\Temp\ctbhayyzie"
2756bQrq.exe C:\Users\test22\AppData\Local\Temp\bQrq.exe /stext "C:\Users\test22\AppData\Local\Temp\nvpsbqitwmmnh"
2816bQrq.exe C:\Users\test22\AppData\Local\Temp\bQrq.exe /stext "C:\Users\test22\AppData\Local\Temp\ppukcjtusufsrfkxy"
2880bQrq.exe C:\Users\test22\AppData\Local\Temp\bQrq.exe /stext "C:\Users\test22\AppData\Local\Temp\keicy"
2980bQrq.exe C:\Users\test22\AppData\Local\Temp\bQrq.exe /stext "C:\Users\test22\AppData\Local\Temp\uyvuzaya"
3040bQrq.exe C:\Users\test22\AppData\Local\Temp\bQrq.exe /stext "C:\Users\test22\AppData\Local\Temp\fabfzsjbhhtd"
1964wscript.exe "C:\Windows\System32\WScript.exe" "C:\Users\test22\AppData\Local\Temp\qbpwgrxkesssvelmcaedlaeqpyoqte.vbs"
3024