cmd.exe "C:\Windows\System32\cmd.exe" /c PowerShell.exe -windowstyle hidden powershell -c C:\TheDream\RootDesign.exe
2076powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -c C:\TheDream\RootDesign.exe
2280RootDesign.exe "C:\TheDream\RootDesign.exe"
2408explorer.exe C:\Windows\Explorer.EXE
1236