AdvancedRun.exe "C:\Users\test22\AppData\Local\Temp\341bb6a1-a324-4931-acc4-094bd6bf34fc\AdvancedRun.exe" /EXEFilename "C:\Users\test22\AppData\Local\Temp\341bb6a1-a324-4931-acc4-094bd6bf34fc\test.bat" /WindowState ""0"" /PriorityClass ""32"" /CommandLine "" /StartDirectory "" /RunAs 8 /Run
972powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Local\Temp\cssrss1.exe" -Force
248powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Local\Temp\cssrss1.exe" -Force
2652powershell.exe powershell Add-MpPreference -ExclusionPath C:\
2264cmd.exe "C:\Windows\System32\cmd.exe"
2392explorer.exe C:\Windows\Explorer.EXE
1236