 The final payload proceeds to generate the following mutex to ensure only one copy of the malware is running concurrently:  Global\SPPLMUTEX  The payload then spawns two threads—one to maintain persistence and another to gather victim information and perform command and control operations.