scangur46468464.exe "C:\Users\test22\AppData\Local\Temp\scangur46468464.exe"
2820cmd.exe "cmd.exe" /C mkdir "C:\Users\test22\AppData\Roaming\firefox"
2884cmd.exe "cmd.exe" /C schtasks /create /sc minute /mo 1 /tn "Nafifas" /tr "'C:\Users\test22\AppData\Roaming\firefox\firefox.exe'" /f
2956schtasks.exe schtasks /create /sc minute /mo 1 /tn "Nafifas" /tr "'C:\Users\test22\AppData\Roaming\firefox\firefox.exe'" /f
3036cmd.exe "cmd.exe" /C copy "C:\Users\test22\AppData\Local\Temp\scangur46468464.exe" "C:\Users\test22\AppData\Roaming\firefox\firefox.exe"
800