techthoughts2
11/12/2017 - 9:30 PM

Encode Command

tbd

[Convert]::ToBase64String([System.Text.Encoding]::Unicode.GetBytes('Import-PfxCertificate -FilePath C:\tmp\BrowserCertificate.p12 -Password (Get-Content -Path C:\tmp\pass.txt | ConvertTo-SecureString -Key (Get-Content -Path C:\tmp\registry-backup070517.key)) -CertStoreLocation Cert:\CurrentUser\My -Exportable'))

powershell.exe -NoProfile -NonInteractive -WindowStyle Hidden -ExecutionPolicy Bypass -EncodedCommand SQBtAHAAbwByAHQALQBQAGYAeABDAGUAcgB0AGkAZgBpAGMAYQB0AGUAIAAtAEYAaQBsAGUAUABhAHQAaAAgAEMAOgBcAHQAbQBwAFwAQgByAG8AdwBzAGUAcgBDAGUAcgB0AGkAZ
gBpAGMAYQB0AGUALgBwADEAMgAgAC0AUABhAHMAcwB3AG8AcgBkACAAKABHAGUAdAAtAEMAbwBuAHQAZQBuAHQAIAAtAFAAYQB0AGgAIABDADoAXAB0AG0AcABcAHAAYQBzAHMALg
B0AHgAdAAgAHwAIABDAG8AbgB2AGUAcgB0AFQAbwAtAFMAZQBjAHUAcgBlAFMAdAByAGkAbgBnACAALQBLAGUAeQAgACgARwBlAHQALQBDAG8AbgB0AGUAbgB0ACAALQBQAGEAdAB
oACAAQwA6AFwAdABtAHAAXAByAGUAZwBpAHMAdAByAHkALQBiAGEAYwBrAHUAcAAwADcAMAA1ADEANwAuAGsAZQB5ACkAKQAgAC0AQwBlAHIAdABTAHQAbwByAGUATABvAGMAYQB0
AGkAbwBuACAAQwBlAHIAdAA6AFwAQwB1AHIAcgBlAG4AdABVAHMAZQByAFwATQB5ACAALQBFAHgAcABvAHIAdABhAGIAbABlAA==