AdvancedRun.exe "C:\Users\test22\AppData\Local\Temp\21585a65-a10f-457a-ae1e-f2f49fcfcf0f\AdvancedRun.exe" /EXEFilename "C:\Users\test22\AppData\Local\Temp\21585a65-a10f-457a-ae1e-f2f49fcfcf0f\test.bat" /WindowState ""0"" /PriorityClass ""32"" /CommandLine "" /StartDirectory "" /RunAs 8 /Run
2236powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Local\Temp\136.exe" -Force
2776powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Local\Temp\136.exe" -Force
1940136.exe C:\Users\test22\AppData\Local\Temp\136.exe
1296