DRAFTCOPY-BILL-PDF309874847.scr "C:\Users\test22\AppData\Local\Temp\DRAFTCOPY-BILL-PDF309874847.scr"
2648wscript.exe "C:\Windows\System32\wscript.exe" C:\Users\test22\AppData\Roaming\EkoHX.vbs
556wscript.exe "C:\Windows\System32\wscript.exe" C:\Users\test22\AppData\Roaming\OPAFu.vbs
1768