powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy unrestricted -File C:\Users\test22\AppData\Local\Temp\pw.ps1
2540shutdown.exe "C:\Windows\system32\shutdown.exe" /r /t 15
2824explorer.exe C:\Windows\Explorer.EXE
1452