WINWORD.EXE "C:\Program Files (x86)\Microsoft Office\Office15\WINWORD.EXE" "C:\Users\test22\AppData\Local\Temp\invoice attachment.docm"
2488wscript.exe "C:\Windows\System32\WScript.exe" "C:\Users\test22\AppData\Local\fijxgr1chfv6js.vbs"
292rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\rad7864D.tmp.dll,runquery
2868