Behavioral Analysis

SHOWDRIVE.EXE SHOWDRIVE.EXE

PECMD.EXE PECMD.EXE show -1:-1

cmd.exe C:\Windows\system32\cmd.exe /c bcdedit>C:\Windows\efi.txt

cmd.exe C:\Windows\system32\cmd.exe /c omnifs32.exe -nousb -noide info>omnifs.txt

SHOWDRIVE.EXE SHOWDRIVE.EXE

cmd.exe C:\Windows\system32\cmd.exe /c omnifs32.exe -nousb -noide info>omnifs.txt

cmd.exe C:\Windows\system32\cmd.exe /c DSPTW.exe /a /pdr /y>dspt.txt

cmd.exe C:\Windows\system32\cmd.exe /c DSPTW.exe 1 /find:all /ghoststyle /y>dspt1.txt