The target file is a .cmd script, which is already added to exclusions and works as intended in scan. (e.g. not reported in a folder scan)
However, when I ran the .cmd script, the process is terminated and gets moved into quarantine.
After bisecting, I found that System Watcher is culprit.
Is it a bug? I couldn't found any configuration for System Watcher.