Behavioral Analysis

findstr.exe findstr /I "wrsa.exe opssvc.exe"

tasklist.exe tasklist

tasklist.exe tasklist

findstr.exe findstr /I "avastui.exe avgui.exe nswscsvc.exe sophoshealth.exe"

cmd.exe cmd /c md 55118595

findstr.exe findstr /V "RealizedBreachAttractCasino" Sapphire

cmd.exe cmd /c copy /b Bulk + Vic + Wherever 55118595\g

Weblog.pif 55118595\Weblog.pif 55118595\g

PING.EXE ping -n 5 127.0.0.1