Impacket's psexec.py remotely executes commands on Windows systems over SMB by uploading the embedded RemComSvc service binary to a writable share, creating and starting a temporary service through the Service Control Manager RPC interface, and using SMB named pipes for interactive command I/O. The service and uploaded binary are normally removed when the session exits cleanly.
Python
RESTRICTED_ACCESS_BLUR_MARKER