AdvancedRun.exe "C:\Users\test22\AppData\Local\Temp\adae3e18-0440-4c82-a74d-22ea833c5503\AdvancedRun.exe" /EXEFilename "C:\Users\test22\AppData\Local\Temp\adae3e18-0440-4c82-a74d-22ea833c5503\test.bat" /WindowState ""0"" /PriorityClass ""32"" /CommandLine "" /StartDirectory "" /RunAs 8 /Run
1108powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Local\Temp\1st0build.exe" -Force
1912powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Local\Temp\1st0build.exe" -Force
11041st0build.exe C:\Users\test22\AppData\Local\Temp\1st0build.exe
1332