Suspicious mshta child process
System Binary Proxy Execution, Mshta
System Binary Proxy Execution, Mshta
Remote System Discovery
Modify Registry
LSASS Memory, OS Credential Dumping
Registry Run Keys / Startup Folder, Boot or Logon Autostart Execution