Is There anybody who knows that why using Powershell can avoid being recognized as a malware by Windows Defender?

[Cartethyia-0612]

As is known to all, if the Windows Defender is enabled, when we download the script directly from Github, the script will be recognized as a malware( #933 ).But when using the Powershell to get the script, it can run normally without being detected. So how does it work?

[WindowsAddict]

https://get.activated.win/

It creates a unique file on each run, hence Defender isn't able to flag it.

[Cartethyia-0612]

So it is reasonable to infer that Windows Defender detects a malware by recognizing its GUID, instead of analysing the code itself, right?
PS:Will the script be automatically deleted when closed?

[WindowsAddict]

They often recognize malware by file checksum, and if that changes, it can be evaded.
Yes, in PowerShell method, script deletes the file in the end.