I checked WP_Cron and there wasn’t anything there taht was unusual. After that I installed the WordFence plugin which seems to have cleared up some nasty files and evidence of malware attacks. The issue seems to have cleared up now.
Thanks or the advice!