schtasks.exe "schtasks" /create /tn "audiodg" /sc ONLOGON /tr "'C:\util\ProcessMonitor\audiodg.exe'" /rl HIGHEST /f
2444schtasks.exe "schtasks" /create /tn "winlogon" /sc ONLOGON /tr "'C:\Windows\System32\spbcd\winlogon.exe'" /rl HIGHEST /f
2852schtasks.exe "schtasks" /create /tn "WmiPrvSE" /sc ONLOGON /tr "'C:\Sandbox\test22\DefaultBox\drive\C\Windows\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\WmiPrvSE.exe'" /rl HIGHEST /f
1016schtasks.exe "schtasks" /create /tn "sppsvc" /sc ONLOGON /tr "'C:\FontsavesInto\sppsvc.exe'" /rl HIGHEST /f
1788schtasks.exe "schtasks" /create /tn "taskhost" /sc ONLOGON /tr "'C:\Windows\System32\iassdo\taskhost.exe'" /rl HIGHEST /f
2876taskhost.exe "C:\Windows\System32\iassdo\taskhost.exe"
656