Loads dropped DLL

Command and Scripting Interpreter: PowerShell

Using powershell.exe command.

Legitimate hosting services abused for malware hosting/C2

Hide Artifacts: Hidden Files and Directories

Sets desktop wallpaper using registry