HEHDNB.exe "C:\Users\test22\AppData\Local\Temp\HEHDNB.exe"
1548cmd.exe C:\Windows\system32\cmd.exe /c schtasks /create /tn HOPRFU.exe /tr C:\Users\test22\AppData\Roaming\Windata\Acrobat Reader DC.exe /sc minute /mo 1
2396schtasks.exe schtasks /create /tn HOPRFU.exe /tr C:\Users\test22\AppData\Roaming\Windata\Acrobat Reader DC.exe /sc minute /mo 1
1660wscript.exe WSCript C:\Users\test22\AppData\Local\Temp\HOPRFU.vbs
2412explorer.exe C:\Windows\Explorer.EXE
1388