SHA-256 hash of stage.ps1 — second-stage PowerShell loader that adds Defender exclusions, deploys WinDefCtl and CrySome RAT, and displays decoy PDF
