schtasks.exe "schtasks" /create /tn "lsm" /sc ONLOGON /tr "'C:\Windows\System32\ntkrnlpa\lsm.exe'" /rl HIGHEST /f
1468schtasks.exe "schtasks" /create /tn "taskhost" /sc ONLOGON /tr "'C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\taskhost.exe'" /rl HIGHEST /f
540schtasks.exe "schtasks" /create /tn "wininit" /sc ONLOGON /tr "'C:\Windows\System32\modemui\wininit.exe'" /rl HIGHEST /f
2252schtasks.exe "schtasks" /create /tn "pw" /sc ONLOGON /tr "'C:\MSOCache\All Users\{90120000-001A-0412-0000-0000000FF1CE}-C\pw.exe'" /rl HIGHEST /f
2220schtasks.exe "schtasks" /create /tn "SearchFilterHost" /sc ONLOGON /tr "'C:\Sandbox\test22\DefaultBox\SearchFilterHost.exe'" /rl HIGHEST /f
2768schtasks.exe "schtasks" /create /tn "winlogon" /sc ONLOGON /tr "'C:\ProgramData\Application Data\winlogon.exe'" /rl HIGHEST /f
1472schtasks.exe "schtasks" /create /tn "lsass" /sc ONLOGON /tr "'C:\Windows\System32\credui\lsass.exe'" /rl HIGHEST /f
1492lsass.exe "{path}"
1304