abu.exe "C:\Users\test22\AppData\Local\Temp\abu.exe"
1868cmd.exe "C:\Windows\System32\cmd.exe" /c schtasks /create /f /sc onlogon /rl highest /tn "webs" /tr '"C:\Users\test22\AppData\Roaming\webs.exe"' & exit
540schtasks.exe schtasks /create /f /sc onlogon /rl highest /tn "webs" /tr '"C:\Users\test22\AppData\Roaming\webs.exe"'
2720timeout.exe timeout 3
2160webs.exe "C:\Users\test22\AppData\Roaming\webs.exe"
2760