Executes dropped EXE

Indirect Command Execution

Adversaries may abuse utilities that allow for command execution to bypass security restrictions that limit the use of command-line interpreters.

Loads dropped DLL

Suspicious use of NtSetInformationThreadHideFromDebugger