cmd.exe "C:\Windows\System32\cmd.exe" /c schtasks /create /f /sc onlogon /rl highest /tn "Services32" /tr '"C:\Users\test22\Services32.exe"' /RU "SYSTEM" & exit
2672schtasks.exe schtasks /create /f /sc onlogon /rl highest /tn "Services32" /tr '"C:\Users\test22\Services32.exe"' /RU "SYSTEM"
2720sihost32.exe "C:\Users\test22\AppData\Roaming\Microsoft\Telemetry\sihost32.exe"
1456cmd.exe "C:\Windows\System32\cmd.exe" /c schtasks /create /f /sc onlogon /rl highest /tn "Services32" /tr '"C:\Users\test22\Services32.exe"' /RU "SYSTEM" & exit
844schtasks.exe schtasks /create /f /sc onlogon /rl highest /tn "Services32" /tr '"C:\Users\test22\Services32.exe"' /RU "SYSTEM"
2044