Behavioral Analysis

findstr.exe findstr /I "avastui.exe avgui.exe nswscsvc.exe sophoshealth.exe"

tasklist.exe tasklist

tasklist.exe tasklist

findstr.exe findstr /I "wrsa.exe"

cmd.exe cmd /c mkdir 20701

cmd.exe cmd /c copy /b Democrat + Entitled + Garage + Nintendo + Aka 20701\Receptors.pif

cmd.exe cmd /c copy /b Textbooks + Leader + Print 20701\p

Receptors.pif 20701\Receptors.pif 20701\p

PING.EXE ping -n 5 localhost