(Destination:new\-object* Destination:net.webclient* Destination:.downloadstring*) OR (Destination:new\-object* Destination:net.webclient* Destination:.downloadfile*) OR (Destination:\ iex\(* OR Destination:\ \-nop\ * OR Destination:\ \-noprofile\ * OR Destination:\ \-decode\ * OR Destination:\ \-enc\ * OR Destination:WScript.Shell* OR Destination:System.Security.Cryptography.FromBase64Transform*)