Bug D - VMware Workstation (Windows host) HGFS reparse-point escape - payload set
=================================================================================
BENIGN research payloads. Each only writes a marker file on the host; none is destructive.
For authorized reproduction of the guest-to-host escape in a private lab only.

  guest-read.exe  one CreateFileW read escape (prints a host file outside the share)
  hostmark.exe    host-exec marker: proves a guest-planted EXE RUNS on the host (-> C:\host-pwned-exe.txt)
  lowrun.exe      run a command at Low/Untrusted integrity (confinement test)
  lowrun2.exe     run a command at Low/Untrusted/AppContainer (confinement matrix)
  hostpwn.bat     Startup-triggered marker (-> C:\host-pwned.txt at next logon)
  hostpwn2.bat    media-delivered marker variant (-> C:\host-delivered.txt)
  settings.json   Windows Terminal config carrying a no-reboot marker (-> C:\host-noreboot.txt)
  job.bat         autonomous-exec target: overwrite the file an existing scheduled task runs (-> C:\host-cron.txt, SYSTEM)
