Executes dropped EXE

Loads dropped DLL

Themida packer

Detects Themida, an advanced Windows software protection system.

Checks whether UAC is enabled

Network Share Discovery

Attempt to gather information on host network.

Discovers running processes

Running process information can be used to identify security tools or plan follow-on actions.

Suspicious use of NtSetInformationThreadHideFromDebugger