WINWORD.EXE "C:\Program Files (x86)\Microsoft Office\Office15\WINWORD.EXE" C:\Users\test22\AppData\Local\Temp\Ticket00073146.docm
1608powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" [Reflection.Assembly]::LoadFile('C:\Users\test22\AppData\Local\Temp\skfk.txt');$doo = New-Object Tysdf.Class1;$doo.sadkj()
2088