schtasks /query /fo LIST /v
Check permissions on binary
icacls C:\Users\john\Documents\Cleanup.exe
If permissions are sufficient (I F) replace with malicious binary
Last updated 8 months ago
