schtasks.exe "schtasks" /create /tn "winlogon" /sc ONLOGON /tr "'C:\GPKI\winlogon.exe'" /rl HIGHEST /f
2532schtasks.exe "schtasks" /create /tn "pw" /sc ONLOGON /tr "'C:\PerfLogs\Admin\pw.exe'" /rl HIGHEST /f
240schtasks.exe "schtasks" /create /tn "dwm" /sc ONLOGON /tr "'C:\GPKI\dwm.exe'" /rl HIGHEST /f
1568schtasks.exe "schtasks" /create /tn "WmiPrvSE" /sc ONLOGON /tr "'C:\ProgramData\Package Cache\{EF1EC6A9-17DE-3DA9-B040-686A1E8A8B04}v14.0.24215\packages\vcRuntimeAdditional_amd64\WmiPrvSE.exe'" /rl HIGHEST /f
2728schtasks.exe "schtasks" /create /tn "smss" /sc ONLOGON /tr "'C:\Windows\System32\KBDTAJIK\smss.exe'" /rl HIGHEST /f
2332chcp.com chcp 65001
1756PING.EXE ping -n 5 localhost
1772powershell.exe "powershell" Get-MpPreference -verbose
1492