What's in this file?

[sissj]

I'm too scared to open it seeming it is a script file and I dont know what it is can anyone tell me what the contents is?

<Suspicious Link Removed>

[DebatED Nothing]

59 minutes ago, sissj said:

I'm too scared to open it seeming it is a script file and I dont know what it is can anyone tell me what the contents is?

nope fuck that.

[sissj]

Yup, I don't know what it is :l

[DebatED Nothing]

1 minute ago, sissj said:

Yup, I don't know what it is :l

Where is it from?

[sissj]

Just now, DebatED Nothing said:

Where is it from?

This video that was on someone else's post, I was looking in the comments and found it

 

 

[DebatED Nothing]

1 minute ago, sissj said:

This video that was on someone else's post, I was looking in the comments and found it

 

So it's from a random internet person? Don't open it.

[2FA]

Run a VM and open it in that.

[sissj]

Just now, DebatED Nothing said:

So it's from a random internet person? Don't open it.

That why I wanted someone else to so I don't have to

 

 Not feeling very brave today.

[Macronus]

You should not download random files off the internet, especially on windows.

Its a weirdly formulated Visual Basic Script that has probably been obfuscated. Just ignore it, run your AV, remove the link and move on

Here is an image ~ contents of the files is the same.
https://www.dropbox.com/s/l0zf4hauyqr94dl/Screenshot%202016-02-02%2017.57.26.png?dl=0&preview=Screenshot+2016-02-02+17.57.26.png

[sissj]

Just now, Macronus said:

You should not download random files off the internet, especially on windows.

Its a weirdly formulated Visual Basic Script that has probably been obfuscated. Just ignore it, run your AV, remove the link and move on

https://photos-2.dropbox.com/t/2/AAAC7yn35e3IsW44Mq6ChLqoiCQgEkICW2pAcJ12oKlHuw/12/11219777/png/32x32/1/_/1/2/Screenshot%202016-02-02%2017.57.26.png/EOGZrggYkv8EIAcoBw/azV58JweQWvbJWfs1ghA9b7kOx-D6cG3pa4DGfK3dUg?size=1280x960&size_mode=3

That link doesnt work By the way

[iamdarkyoshi]

Should I run it on my school's rotten potato powered PC? 

[sissj]

Just now, iamdarkyoshi said:

Should I run it on my school's rotten potato powered PC? 

JUST DO IT!

[Macronus]

1 minute ago, sissj said:

That link doesnt work By the way

Works now, still getting used to img tags not working.

[sissj]

Just now, iamdarkyoshi said:

Should I run it on my school's rotten potato powered PC? 

I really wanna know what it is

[ZetZet]

the comment is from 4 hours ago, it's botted up in upvotes. report it and walk away.

[sissj]

Just now, Macronus said:

Works now, still getting used to img tags not working.

I know the file contents, But I dont know what the script does.

[Macronus]

Just now, sissj said:

I know the file contents, But I dont know what the script does.

It is obfuscated ( http://searchsoftwarequality.techtarget.com/definition/obfuscation ), but I'm more then certain its malicious. Install a VM and try it out.

[sissj]

Just now, Macronus said:

It is obfuscated ( http://searchsoftwarequality.techtarget.com/definition/obfuscation ), but I'm more then certain its malicious. Install a VM and try it out.

VM? Something like sandboxie?

[iamdarkyoshi]

1 minute ago, Macronus said:

It is obfuscated ( http://searchsoftwarequality.techtarget.com/definition/obfuscation ), but I'm more then certain its malicious. Install a VM and try it out.

But disconnect any network drives from the VM  

[Macronus]

5 minutes ago, sissj said:

VM? Something like sandboxie?

I was more thinking about a full installation in VMbox or something similar but without as someone body else mentioned internet access.

I personally haven't used sandboxie, so I can't vouch.

BE WARNED.

Googling the link does show that user spammed that link so it is certainly malicious. Please remove the link before someone downloads and runs it.

[2FA]

I opened the link in a VM and it redirects to a website call etsy which apparently is a marketplace for items like antiques, supplies, stuff like that. It also says at the top that the invitation has expired. Likely the scripts install some sort of malware while redirecting to that site as to not seem malicious.

[sissj]

20 minutes ago, DeadEyePsycho said:

I opened the link in a VM and it redirects to a website call etsy which apparently is a marketplace for items like antiques, supplies, stuff like that. It also says at the top that the invitation has expired. Likely the scripts install some sort of malware while redirecting to that site as to not seem malicious.

Thanks!