Leo
4
Based on that, I would expect this to work (although I don't know why they are running it via powershell.exe when cmd.exe would do and launch faster):
powershell -windowstyle hidden -command "Start-Process cmd -ArgumentList '/c takeown /f \"%1\" && icacls \"%1\" /grant *S-1-3-4:F /t /c /l' -Verb runAs"
Or this:
Or this: