Memory Execution

Reflective code loading executes code directly from memory within the current process, rather than loading a file-backed shared module or injecting into a separate process. PowerShell's Assembly.Load(Byte[]) is one managed implementation; other runtimes and operating systems use different loaders. This can reduce on-disk payload artifacts, but does not guarantee a defense bypass.