Search notes:

WMIC.exe startup

c:\> wmic startup get caption, command, user
Caption         Command                                                                    User
OneDrive        "C:\Users\Rene\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background  TQ84\Rene
SecurityHealth  %windir%\system32\SecurityHealthSystray.exe                                Public

Index