powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy unrestricted -File C:\Users\test22\AppData\Local\Temp\up.ps1
2540shutdown.exe "C:\Windows\system32\shutdown.exe" /r /t 10
2768explorer.exe C:\Windows\Explorer.EXE
1452