wscript.exe WSCript C:\Users\test22\AppData\Local\Temp\LZTIXH.vbs
2308cmd.exe C:\Windows\system32\cmd.exe /c schtasks /create /tn LZTIXH.exe /tr C:\Users\test22\AppData\Roaming\Windata\notepad.exe /sc minute /mo 1
2212schtasks.exe schtasks /create /tn LZTIXH.exe /tr C:\Users\test22\AppData\Roaming\Windata\notepad.exe /sc minute /mo 1
2484Client.exe "C:\Users\test22\AppData\Local\Temp\Client.exe"
2488wscript.exe "C:\Windows\System32\wscript.exe" //B "C:\Users\test22\AppData\Local\Temp\sheet.js" /elevated
2668build.exe "C:\Users\test22\AppData\Local\Temp\build.exe"
2532EXCEL.EXE "C:\Program Files (x86)\Microsoft Office\Office15\EXCEL.EXE" /dde
2708