Clipboard Data

Adversaries may collect data stored in the clipboard from users copying information within or between applications.

Loads dropped DLL

Reads user/profile data of web browsers

Infostealers often target stored browser data, which can include saved credentials etc.

Network Service Discovery

Attempt to gather information on host's network.

Network Share Discovery

Attempt to gather information on host network.

Power Settings

powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.

Discovers running processes

Running process information can be used to identify security tools or plan follow-on actions.