Several techniques are employed for executing the PowerShell code: If command starts with “excel”, then it leverages DDEInitiate Method of Excel.Appilcation to execute the code:  If the command starts with “outlook”, then it leverages Outlook.Application and MSHTA to execute the code:  If the command starts with “risk”, then execution is performed through DCOM object:      File upload functionality