APT34: PoisonFrog - Question 6

For the 

What is the name of the file that executes the HTTP and DNS handling scripts?, I am confused on where I should be digging deeper as the powershell script was showcased to be wrong in terms of entering down the name, as well as other parts of the file

I also tried parsing for the file name through the decoded script but I cant seem to find any meaningful leads.

Basically I am wondering about what the expectation is for the question and where/how I should approach at a different angle