Modifies WinLogon for persistence

Modifies system executable filetype association

Modifies visibility of file extensions in Explorer

Modifies visiblity of hidden/system files in Explorer

Windows security bypass

Blocks application from running via registry modification

Adds application to list of disallowed applications.

Disables RegEdit via registry modification

Disables use of System Restore points

Executes dropped EXE

Sets file execution options in registry