Executes dropped EXE

Loads dropped DLL

Modifies system executable filetype association

Suspicious use of SetThreadContext

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.