Behavioral Analysis

tasklist.exe tasklist

findstr.exe findstr /I "avastui.exe avgui.exe nswscsvc.exe sophoshealth.exe"

tasklist.exe tasklist

findstr.exe findstr /I "wrsa.exe"

cmd.exe cmd /c mkdir 4422

cmd.exe cmd /c copy /b Goal + Lexus + Falls + Rfc 4422\Pros.pif

cmd.exe cmd /c copy /b United + Oo + Coupons + Scheme + Rural 4422\B

Pros.pif 4422\Pros.pif 4422\B

PING.EXE ping -n 5 localhost