((ScriptBlockText:\-nop* ScriptBlockText:\ \-w\ * ScriptBlockText:hidden* ScriptBlockText:\ \-c\ * ScriptBlockText:\[Convert\]\:\:FromBase64String*) OR (ScriptBlockText:\ \-w\ * ScriptBlockText:hidden* ScriptBlockText:\-noni* ScriptBlockText:\-nop* ScriptBlockText:\ \-c\ * ScriptBlockText:iex* ScriptBlockText:New\-Object*) OR (ScriptBlockText:\ \-w\ * ScriptBlockText:hidden* ScriptBlockText:\-ep* ScriptBlockText:bypass* ScriptBlockText:\-Enc*) OR ((ScriptBlockText:powershell* ScriptBlockText:reg* ScriptBlockText:add*) (ScriptBlockText:\\software\\microsoft\\windows\\currentversion\\run* OR ScriptBlockText:\\software\\wow6432node\\microsoft\\windows\\currentversion\\run* OR ScriptBlockText:\\software\\microsoft\\windows\\currentversion\\policies\\explorer\\run*)) OR (ScriptBlockText:bypass* ScriptBlockText:\-noprofile* ScriptBlockText:\-windowstyle* ScriptBlockText:hidden* ScriptBlockText:new\-object* ScriptBlockText:system.net.webclient* ScriptBlockText:.download*) OR (ScriptBlockText:iex* ScriptBlockText:New\-Object* ScriptBlockText:Net.WebClient* ScriptBlockText:.Download*)) (-(ScriptBlockText:\(New\-Object\ System.Net.WebClient\).DownloadString\('https\:\/\/community.chocolatey.org\/install.ps1* OR ScriptBlockText:\(New\-Object\ System.Net.WebClient\).DownloadString\('https\:\/\/chocolatey.org\/install.ps1'\)* OR ScriptBlockText:Write\-ChocolateyWarning*))