powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy unrestricted -File C:\Users\test22\AppData\Local\Temp\LBB_PS1_pass.ps1
3036wermgr.exe "C:\Windows\system32\wermgr.exe" "-outproc" "3036" "904"
2380