dutyx.exe "C:\Users\test22\AppData\Local\Temp\dutyx.exe"
8024cmd.exe "C:\Windows\System32\cmd.exe" /c schtasks /create /f /sc onlogon /rl highest /tn "micosoft2" /tr '"C:\Users\test22\AppData\Roaming\micosoft2.exe"' & exit
5260schtasks.exe schtasks /create /f /sc onlogon /rl highest /tn "micosoft2" /tr '"C:\Users\test22\AppData\Roaming\micosoft2.exe"'
8628timeout.exe timeout 3
4376micosoft2.exe "C:\Users\test22\AppData\Roaming\micosoft2.exe"
3100