-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathprocess.bat
More file actions
51 lines (45 loc) · 1.26 KB
/
process.bat
File metadata and controls
51 lines (45 loc) · 1.26 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
REM Test system processes that should always be running
win-witr winlogon.exe
win-witr lsass.exe
win-witr win-witr.exe
win-witr wininit.exe
win-witr explorer.exe
win-witr Registry
win-witr csrss.exe
win-witr fontdrvhost.exe
win-witr svchost.exe
win-witr smss.exe
win-witr services.exe
win-witr powershell.exe
win-witr Runner.Listener.exe
win-witr cmd.exe
win-witr pwsh.exe
win-witr Runner.Worker.exe
win-witr hosted-compute-agent
win-witr conhost.exe
win-witr dwm.exe
win-witr RuntimeBroker.exe
win-witr SearchIndexer.exe
win-witr spoolsv.exe
win-witr taskhostw.exe
win-witr dllhost.exe
REM Start notepad and test it, then close
start /B notepad.exe
timeout /t 1 /nobreak >nul
win-witr notepad.exe
taskkill /F /IM notepad.exe >nul 2>&1
REM Start calc and test it, then close
start /B calc.exe
timeout /t 1 /nobreak >nul
win-witr calc.exe
taskkill /F /IM calc.exe >nul 2>&1
REM Start mspaint and test it, then close
start /B mspaint.exe
timeout /t 1 /nobreak >nul
win-witr mspaint.exe
taskkill /F /IM mspaint.exe >nul 2>&1
REM Start PowerShell and test it, then close
start /B powershell.exe -NoProfile -Command "Start-Sleep -Seconds 5"
timeout /t 1 /nobreak >nul
win-witr powershell.exe
taskkill /F /IM powershell.exe >nul 2>&1