((CommandLine:\-nop* CommandLine:\ \-w\ * CommandLine:hidden* CommandLine:\ \-c\ * CommandLine:\[Convert\]\:\:FromBase64String*) OR (CommandLine:\ \-w\ * CommandLine:hidden* CommandLine:\-noni* CommandLine:\-nop* CommandLine:\ \-c\ * CommandLine:iex* CommandLine:New\-Object*) OR (CommandLine:\ \-w\ * CommandLine:hidden* CommandLine:\-ep* CommandLine:bypass* CommandLine:\-Enc*) OR (CommandLine:powershell* CommandLine:reg* CommandLine:add* CommandLine:\\software\\*) OR (CommandLine:bypass* CommandLine:\-noprofile* CommandLine:\-windowstyle* CommandLine:hidden* CommandLine:new\-object* CommandLine:system.net.webclient* CommandLine:.download*) OR (CommandLine:iex* CommandLine:New\-Object* CommandLine:Net.WebClient* CommandLine:.Download*)) (-(CommandLine:\(New\-Object\ System.Net.WebClient\).DownloadString\('https\:\/\/community.chocolatey.org\/install.ps1* OR CommandLine:Write\-ChocolateyWarning*))