How do you reflect it?
Is there a way to make this reflect at runtime so it can be more useful in terms of detection... Right now the only way this works is by having to run the exe directly from disk.  Only way I've made this break through defender using a c# shellcode injector from disk but that too eventually gets caught by defender in about 15m. No chance the bin will stay undetectable even with the cleanest encryption because it's behavior is getting caught. This has to be pushed in memory somehow but I'm sure you already know this. Any tips on how I can convert the codedom output bin to work without needing to touch disk so it's easy just to reflect the exe?