cmd.exe "C:\Windows\System32\cmd.exe" /c Copy "C:\Users\test22\AppData\Local\Temp\Expense.exe" "C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Expense.exe"
6012chcp.com chcp 65001
2572PING.EXE ping -n 10 localhost
3932cmd.exe "C:\Windows\System32\cmd.exe" /c Copy "C:\Users\test22\AppData\Local\Temp\Expense.exe" "C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Expense.exe"
8936Expense.exe "C:\Users\test22\AppData\Local\Temp\Expense.exe"
808