TSO_011020_10063863221.exe "C:\Users\test22\AppData\Local\Temp\TSO_011020_10063863221.exe"
2940cmd.exe "cmd" /c schtasks /create /sc minute /mo 1 /tn "Nanias" /tr "'C:\Users\test22\AppData\Roaming\task\task.exe'" /f
3000schtasks.exe schtasks /create /sc minute /mo 1 /tn "Nanias" /tr "'C:\Users\test22\AppData\Roaming\task\task.exe'" /f
2116cmd.exe "cmd" /c copy "C:\Users\test22\AppData\Local\Temp\TSO_011020_10063863221.exe" "C:\Users\test22\AppData\Roaming\task\task.exe"
3052