powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy unrestricted -File C:\Users\test22\AppData\Local\Temp\archcw.ps1
2544cmstp.exe "C:\Windows\System32\cmstp.exe" /au C:\Users\test22\AppData\Local\Temp\yp4qo1kw.ifq.inf
2668csc.exe "C:\Windows\Microsoft.NET\Framework\v2.0.50727\csc.exe" /noconfig /fullpaths @"C:\Users\test22\AppData\Local\Temp\j7xjtvt4.cmdline"
2708cvtres.exe C:\Windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\test22\AppData\Local\Temp\RESF780.tmp" "c:\Users\test22\AppData\Local\Temp\CSCF76F.tmp"
2760