The final payload is (in this PR) deflated and b64 encoded, so any variance introduced by dynamic var names and the shellcode itself alter the final chunk of script being sent over the wire pretty considerably. I could see a lot of wasted NIDS cycles decompressing and base64 decoding all the text going over SMB or WinRM.

#2075 introduces the PSH parser which handles all of this along with some basic obfuscation techniques to alter the resulting script.

This outdated payload still beats every AV on the market, and its been public in several forms for over a year :).
I think i released updated PSH payloads in 2075 as well which use gzip instead of deflate to compress the payload even more, and along the way provides another method to change whats on the wire. I tried to base32 the result, but psh doesn't seem to have a neat way to deal with b32 (which produces a MUCH smaller payload coupled with gzip).