Unmasking Windows Advanced Persistent Threat Execution