Image:\\schtasks.exe (CommandLine:\ \/create\ * CommandLine:\ \/sc\ once\ * CommandLine:\\Temp\\*)