UAC bypass

Deletes shadow copies

Ransomware often targets backup files to inhibit system recovery.

Command and Scripting Interpreter: PowerShell

Powershell Invoke Web Request.

Disables Task Manager via registry modification