Exploit Protection Exclusion

[joocetil]

We have a legitimate .vbs file being detected as an Exploit.

Unfortunately, we are unable to add it as an exclusion because only file hashes can be applied to Exploit Protection exclusions. File by path causes Exploit Protection to be grayed out:

For now, we created a temporary group and policy with exploit protection disabled but this is obviously not something we want to keep. What's the solution to this?