Behavioral Analysis

RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

cmd.exe "cmd" /c schtasks /create /sc minute /mo 1 /tn "Nafifas" /tr "'C:\Users\test22\AppData\Roaming\svchost\svchost.exe'" /f

cmd.exe "cmd" /c copy "C:\Users\test22\AppData\Local\Temp\bawo.exe" "C:\Users\test22\AppData\Roaming\svchost\svchost.exe"

cmd.exe "cmd" /c mkdir "C:\Users\test22\AppData\Roaming\svchost"