powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Windows\Resources\Themes\쳶쳱촵쳴쳰촴촡촁쳲촉쳸촵촥촤촬\svchost.exe" -Force
2252powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Local\Temp\new.exe" -Force
2276powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Windows\Resources\Themes\쳶쳱촵쳴쳰촴촡촁쳲촉쳸촵촥촤촬\svchost.exe" -Force
2856AdvancedRun.exe "C:\Users\test22\AppData\Local\Temp\fc0b12b6-d84a-405f-b859-e50e46c7a939\AdvancedRun.exe" /EXEFilename "C:\Users\test22\AppData\Local\Temp\fc0b12b6-d84a-405f-b859-e50e46c7a939\test.bat" /WindowState ""0"" /PriorityClass ""32"" /CommandLine "" /StartDirectory "" /RunAs 8 /Run
2840powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Local\Temp\new.exe" -Force
2244