Command and Scripting Interpreter: PowerShell

10 of 11 downloaders spawn hidden powershell.exe via runas to run Start-Service w32time; w32tm /resync (clock resync). Cleanup branch uses PowerShell.