microsoft.com "C:\Users\test22\AppData\Local\Temp\microsoft.com"
schtasks.exe schtasks /create /f /sc ONLOGON /RL HIGHEST /tn LimeRAT-Admin /tr "'C:\Users\test22\AppData\Local\Temp\windows\svchost.exe'"
svchost.exe "C:\Users\test22\AppData\Local\Temp\windows\svchost.exe"
No process loaded Click on a process in the tree above to load its data.