ScriptBlockText:System.Reflection.Assembly.Load\($* OR ScriptBlockText:\[System.Reflection.Assembly\]\:\:Load\($* OR ScriptBlockText:\[Reflection.Assembly\]\:\:Load\($* OR ScriptBlockText:System.Reflection.AssemblyName* OR ScriptBlockText:Reflection.Emit.AssemblyBuilderAccess* OR ScriptBlockText:Reflection.Emit.CustomAttributeBuilder* OR ScriptBlockText:Runtime.InteropServices.UnmanagedType* OR ScriptBlockText:Runtime.InteropServices.DllImportAttribute* OR ScriptBlockText:SuspendThread* OR ScriptBlockText:rundll32*