You see the problem right? You can damage most software vendors with just #1. Then #2 is even worse. #3 you already own them because #1,#2 let you download a

You see the problem right? You can damage most software vendors with just #1. Then #2 is even worse. #3 you already own them because #1,#2 let you download a poisoned msi to the machine. You can get cleaver and dynamically change the hash per download as described year ago when signature based AV was all we had, you dont need this trick. Or... you could just drop powershell, python and execute it and own the machine without trying so hard with just #1 and #2.