WINWORD.EXE "C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE" "C:\Users\test22\AppData\Local\Temp\Inv 272590.doc"
2088WMIC.exe "C:\Windows\System32\wbem\WMIC.exe" process call create 'rundll32.exe "C:\Users\test22\AppData\Roaming\64178.dll" OfflineFilesStart'
2572rundll32.exe rundll32.exe "C:\Users\test22\AppData\Roaming\64178.dll" OfflineFilesStart
2748