ElWebsite.exe "C:\Users\test22\AppData\Local\Temp\ElWebsite.exe"
3008cmd.exe "cmd.exe" /C schtasks /create /sc minute /mo 1 /tn "Nafifas" /tr "'C:\Users\test22\AppData\Roaming\Mshta\Mshta.exe'" /f
3048schtasks.exe schtasks /create /sc minute /mo 1 /tn "Nafifas" /tr "'C:\Users\test22\AppData\Roaming\Mshta\Mshta.exe'" /f
2124cmd.exe "cmd.exe" /C copy "C:\Users\test22\AppData\Local\Temp\mshta.exe" "C:\Users\test22\AppData\Roaming\Mshta\Mshta.exe"
900