wscript.exe "C:\Windows\System32\WScript.exe" "C:\Users\test22\AppData\Local\Temp\_Hzazhvwpd.vbs"
2948powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Set-MpPreference -ExclusionPath C:\,'C:\Users\test22\AppData\Local\notapad.exe'
196ConsoleApp6.exe C:\Users\test22\AppData\Local\Temp\ConsoleApp6.exe
2988