utility-installer.tmp "C:\Users\test22\AppData\Local\Temp\is-QUJ1E.tmp\utility-installer.tmp" /SL5="$30028,922170,832512,C:\Users\test22\AppData\Local\Temp\utility-installer.exe"
1940cmd.exe "C:\Windows\system32\cmd.exe" /C ""C:\Users\test22\AppData\Local\Temp\is-H4IH6.tmp\x64.bat""
2164powershell.exe Powershell.exe -executionpolicy remotesigned -File onesave.ps1
2228explorer.exe C:\Windows\Explorer.EXE
1236