windows system32
move utilman.exe utilman.exe.bak
copy cmd.exe utilman.exe
net user administrator 123456
https://www.cnblogs.com/wpsl5168/p/4064009.html