SolarMarker Backdoor Pretends to be Legit PDFescape Installer

The SolarMarker backdoor pretends to be a legit PDFescape installer. It creates an encoded file and then executes a Power Shell Script command to decode and execute the malicious script.