Behavioral Analysis

findstr.exe findstr /I "wrsa.exe opssvc.exe"

tasklist.exe tasklist

tasklist.exe tasklist

findstr.exe findstr /I "avastui.exe avgui.exe bdservicehost.exe ekrn.exe nswscsvc.exe sophoshealth.exe"

cmd.exe cmd /c md 297145

findstr.exe findstr /V "CorkBkConditionsMoon" Scary

cmd.exe cmd /c copy /b ..\Dependence + ..\Nsw + ..\Developmental + ..\Shared + ..\Ranges + ..\Notify + ..\Pending + ..\Previously k

Cultures.pif Cultures.pif k

choice.exe choice /d y /t 5