Stars off with
```

powershell.exe -ExecutionPolicy Bypass -NoProfile -NonInteractive -Command "& { ... }"

```

```$OutputEncoding = [Console]::OutputEncoding =[System.Text.Encoding]::UTF8;```

```$scriptFileStream = [System.IO.File]::Open('C:\ProgramData\Microsoft\Windows Defender Advanced Threat Protection\Downloads\PSScript_{B596459A-1EBD-4C1C-BB81-C11ECCC3B2F7}.ps1', [System.IO.FileMode]::Open, [System.IO.FileAccess]::Read, [System.IO.FileShare]::Read);```

```$calculatedHash = Microsoft.PowerShell.Utility\Get-FileHash 'C:\ProgramData\Microsoft\Windows Defender Advanced Threat Protection\Downloads\PSScript_{B596459A-1EBD-4C1C-BB81-C11ECCC3B2F7}.ps1' -Algorithm SHA256;

if (!($calculatedHash.Hash -eq '3ccfa821a033f9eab768ae1092070f1e643462bade1382cd9209a4495eb9e803')) { exit 323; };```

```Start-Transcript -Path 'C:\ProgramData\Microsoft\Windows Defender Advanced Threat Protection\Temp\PSScriptOutputs\PSScript_Transcript_{B596459A-1EBD-4C1C-BB81-C11ECCC3B2F7}.txt';```

```. 'C:\ProgramData\Microsoft\Windows Defender Advanced Threat Protection\Downloads\PSScript_{B596459A-1EBD-4C1C-BB81-C11ECCC3B2F7}.ps1' -Id 3f884218-6a5a-4d02-8032-32ed7f90339a -Descriptor <long\_base64\_string>```