Executes dropped EXE

Loads dropped DLL

Command and Scripting Interpreter: PowerShell

Using powershell.exe command.

Indicator Removal: Clear Persistence

Clear artifacts associated with previously established persistence like scheduletasks on a host.