Executes dropped EXE

Reads EFI boot settings

Reads EFI boot settings from the efivars filesystem, may contain security secrets or sensitive data.

Checks CPU configuration

Checks CPU information which indicate if the system is a virtual machine.

Checks hardware identifiers (DMI)

Checks DMI information which indicate if the system is a virtual machine.

Reads hardware information

Accesses system info like serial numbers, manufacturer names etc.