schtasks.exe schtasks /create /f /RU "test22" /tr "C:\ProgramData\MPGPH131\MPGPH131.exe" /tn "MPGPH131 HR" /sc HOURLY /rl HIGHEST
2680schtasks.exe schtasks /create /f /RU "test22" /tr "C:\ProgramData\MPGPH131\MPGPH131.exe" /tn "MPGPH131 LG" /sc ONLOGON /rl HIGHEST
2764jlzfI3MOMBv1vbp25nBj.exe "C:\Users\test22\AppData\Local\Temp\heidiuMNHkTdTYfan\jlzfI3MOMBv1vbp25nBj.exe"
2936iexplore.exe "C:\Program Files (x86)\Internet Explorer\iexplore.exe" SCODEF:2988 CREDAT:145409
3064schtasks.exe schtasks /create /f /RU "test22" /tr "C:\ProgramData\MSIUpdaterV131\MSIUpdaterV131.exe" /tn "MSIUpdaterV131 HR" /sc HOURLY /rl HIGHEST
2516schtasks.exe schtasks /create /f /RU "test22" /tr "C:\ProgramData\MSIUpdaterV131\MSIUpdaterV131.exe" /tn "MSIUpdaterV131 LG" /sc ONLOGON /rl HIGHEST
2580cHXwqlMWUMGBBwN9hxfj.exe "C:\Users\test22\AppData\Local\Temp\heidiuMNHkTdTYfan\cHXwqlMWUMGBBwN9hxfj.exe"
2704y3p6n3ne22r3BFOUsYqb.exe "C:\Users\test22\AppData\Local\Temp\heidiuMNHkTdTYfan\y3p6n3ne22r3BFOUsYqb.exe"
1576a77VWg3R2bV_Qy103LSX.exe "C:\Users\test22\AppData\Local\Temp\heidiuMNHkTdTYfan\a77VWg3R2bV_Qy103LSX.exe"
2056PDbNNj6OmrILaV3JtHH1.exe "C:\Users\test22\AppData\Local\Temp\heidiuMNHkTdTYfan\PDbNNj6OmrILaV3JtHH1.exe"
2932explorer.exe C:\Windows\Explorer.EXE
1452