Behavioral Analysis

powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Windows\Resources\Themes\aero\Shell\ᘙᘙᗸᘏᗪᘙᗮᗬᘝᘂᗭᘦᘣᗬᗪ\svchost.exe" -Force

powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Local\Temp\davidhillzx.exe" -Force

powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Windows\Resources\Themes\aero\Shell\ᘙᘙᗸᘏᗪᘙᗮᗬᘝᘂᗭᘦᘣᗬᗪ\svchost.exe" -Force

AdvancedRun.exe "C:\Users\test22\AppData\Local\Temp\90bf4d57-2bd5-417c-a3c9-383507f9c55b\AdvancedRun.exe" /EXEFilename "C:\Users\test22\AppData\Local\Temp\90bf4d57-2bd5-417c-a3c9-383507f9c55b\test.bat" /WindowState ""0"" /PriorityClass ""32"" /CommandLine "" /StartDirectory "" /RunAs 8 /Run

powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Local\Temp\davidhillzx.exe" -Force

AddInProcess32.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe