powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy unrestricted -File C:\Users\test22\AppData\Local\Temp\LBB_PS1_pass.ps1
2604wermgr.exe "C:\Windows\system32\wermgr.exe" "-outproc" "2604" "904"
2820