PROFORMA INVOICE EXPORTO52022 IMG00237F400 SCANNED DOC_PDF.exe "C:\Users\test22\AppData\Local\Temp\PROFORMA INVOICE EXPORTO52022 IMG00237F400 SCANNED DOC_PDF.exe"
2500powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Local\Temp\PROFORMA INVOICE EXPORTO52022 IMG00237F400 SCANNED DOC_PDF.exe"
688schtasks.exe "C:\Windows\System32\schtasks.exe" /Create /TN "Updates\rKXLJlWZQB" /XML "C:\Users\test22\AppData\Local\Temp\tmp2D7C.tmp"
2312PROFORMA INVOICE EXPORTO52022 IMG00237F400 SCANNED DOC_PDF.exe "C:\Users\test22\AppData\Local\Temp\PROFORMA INVOICE EXPORTO52022 IMG00237F400 SCANNED DOC_PDF.exe"
532schtasks.exe "schtasks.exe" /create /f /tn "SMTP Host" /xml "C:\Users\test22\AppData\Local\Temp\tmp2F9F.tmp"
1900schtasks.exe "schtasks.exe" /create /f /tn "SMTP Host Task" /xml "C:\Users\test22\AppData\Local\Temp\tmp30E8.tmp"
2668