Ebyloto_LetThereBeNightingale_obf.exe "C:\Users\test22\AppData\Local\Temp\Ebyloto_LetThereBeNightingale_obf.exe"
2552cmd.exe "C:\Windows\System32\cmd.exe" /k start /b powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath C:\Users\test22\AppData\Local\Temp\Ebyloto_LetThereBeNightingale_obf.exe & exit
2816powershell.exe powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath C:\Users\test22\AppData\Local\Temp\Ebyloto_LetThereBeNightingale_obf.exe
2884cmd.exe "C:\Windows\System32\cmd.exe" /k start /b powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionExtension .exe & exit
2952powershell.exe powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionExtension .exe
3016