Detects remote thread creation in "KeePass.exe" which could indicates potential password dumping activity