AdvancedRun.exe "C:\Users\test22\AppData\Local\Temp\b3d89b7a-e884-4aff-9e60-4d489ee2afdb\AdvancedRun.exe" /EXEFilename "C:\Users\test22\AppData\Local\Temp\b3d89b7a-e884-4aff-9e60-4d489ee2afdb\test.bat" /WindowState ""0"" /PriorityClass ""32"" /CommandLine "" /StartDirectory "" /RunAs 8 /Run
2872AdvancedRun.exe "C:\Users\test22\AppData\Local\Temp\adbeaacd-7843-45aa-95a5-e6ac121e9fca\AdvancedRun.exe" /EXEFilename "C:\Users\test22\AppData\Local\Temp\adbeaacd-7843-45aa-95a5-e6ac121e9fca\test.bat" /WindowState ""0"" /PriorityClass ""32"" /CommandLine "" /StartDirectory "" /RunAs 8 /Run
2880powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Local\Temp\210.exe" -Force
2976powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Local\Temp\210.exe" -Force
3064powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Local\Temp\210.exe" -Force
1304powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\breakers.exe" -Force
2232powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\breakers.exe" -Force
2288powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Local\Temp\210.exe" -Force
2476breakers.exe "C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\breakers.exe"
2600AdvancedRun.exe "C:\Users\test22\AppData\Local\Temp\6332e2a5-bea0-4715-bca2-9fa2be51cd3d\AdvancedRun.exe" /EXEFilename "C:\Users\test22\AppData\Local\Temp\6332e2a5-bea0-4715-bca2-9fa2be51cd3d\test.bat" /WindowState ""0"" /PriorityClass ""32"" /CommandLine "" /StartDirectory "" /RunAs 8 /Run
788AdvancedRun.exe "C:\Users\test22\AppData\Local\Temp\40c93470-5275-4068-a320-c58589917a36\AdvancedRun.exe" /EXEFilename "C:\Users\test22\AppData\Local\Temp\40c93470-5275-4068-a320-c58589917a36\test.bat" /WindowState ""0"" /PriorityClass ""32"" /CommandLine "" /StartDirectory "" /RunAs 8 /Run
2304powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\breakers.exe" -Force
3700powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\breakers.exe" -Force
3764powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\breakers.exe" -Force
3824powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Program Files\Common Files\System\roughhouse\svchost.exe" -Force
3892powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\breakers.exe" -Force
3968powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Program Files\Common Files\System\roughhouse\svchost.exe" -Force
1784aspnet_regsql.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regsql.exe"
3304powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Program Files\Common Files\System\roughhouse\svchost.exe" -Force
2740powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Local\Temp\210.exe" -Force
1668powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Program Files\Common Files\System\roughhouse\svchost.exe" -Force
2460jsc.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe"
3376