4. Host profiling—Using WMI and native Windows APIs, the malware enumerates system characteristics including hardware identifiers, Malwarebytes