Powershell.exe "Powershell.exe" -ExecutionPolicy Bypass -command Copy-Item 'C:\Users\test22\AppData\Local\Temp\IMG_3360_103pdf.exe' 'C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\svhosk.exe.exe'
2660IMG_3360_103pdf.exe "C:\Users\test22\AppData\Local\Temp\IMG_3360_103pdf.exe"
2748