Persistence using autorun keys - • Keylogger - • Directory and file listing - • Downloading secondary payloads from the C2 server - • Exfiltrating collected information from the host to the C2 server - • Executing arbitrary commands via cmd.exe or PowerShell