Executes dropped EXE

Loads dropped DLL

Checks whether UAC is enabled

Network Share Discovery

Attempt to gather information on host network.

Discovers running processes

Running process information can be used to identify security tools or plan follow-on actions.