Add new option called "appdata" to the exe analysis package, it will copy the malware to the appdata folder and launch it from there, as required for some malware to exhibit their full behavior