svchost shouldn't be in temp folder? is supposed to be a container process and i also doubt it would be 300gb something does not add up.

I would be checking the integrity of the file by scanning it with malware tools.