Reads user/profile data of web browsers

Infostealers often target stored browser data, which can include saved credentials etc.

Accesses Microsoft Outlook profiles

Discovers running processes

Running process information can be used to identify security tools or plan follow-on actions.

Suspicious use of NtSetInformationThreadHideFromDebugger