[Bish0pQ]

Of course this could work, but is it really worth it? There are easier ways to infect someone, you can just send the photo's over if you know him and he'll click them anyway. I don't really see the relation with the Birthday card...

Anyway this should work, but remember that AV's might detect it and it would fail nonetheless. Especially Windows 10 doesn't really like powershell payloads much and usually even Windows Defender finds them.