microsoft.exe "C:\Users\test22\AppData\Local\Temp\microsoft.exe"
1712cmd.exe "cmd.exe" /C mkdir "C:\Users\test22\AppData\Roaming\microsoft"
2124cmd.exe "cmd.exe" /C schtasks /create /sc minute /mo 1 /tn "Nafifas" /tr "'C:\Users\test22\AppData\Roaming\microsoft\microsoft.exe'" /f
2196schtasks.exe schtasks /create /sc minute /mo 1 /tn "Nafifas" /tr "'C:\Users\test22\AppData\Roaming\microsoft\microsoft.exe'" /f
2252cmd.exe "cmd.exe" /C copy "C:\Users\test22\AppData\Local\Temp\microsoft.exe" "C:\Users\test22\AppData\Roaming\microsoft\microsoft.exe"
2328