Forum Discussion
The question is about the script, not the file. So my best guess: Continue to analyze the script.
Yes, question 6 is about the script. Question 7 asks about downloading the file from the URL found in the script from question 6. There is no way to download the file to further analyze. See Kieran's screenshot.
- darkmacheken15 days ago
Bronze II
Got me lost about the question. This is about the Introduction to PS Deobfuscation, I was looking into another one 😅
You don't need to download anything, the question is to analyze the script after it (the script) downloaded the exe. Keep analysing the next "if" statement to see in what branch it falls and that's the part that runs.- SpecTechal15 days ago
Bronze II
Ah so not literally download, just what the script execution would do. Makes sense!
We had an exercise to update the host file in a previous module, so thats what I thought I needed to do. I will keep plugging away.
- netcat14 days ago
Silver I
All questions in this lab are about the script.
There's no need to download anything, I just did the lab.
Maybe re-writing the questions would clarify this:
6: Identify the part in the script that would download a file. Provide your answer using the variable name or the file name, including the extension.
7: After identifying the part in the script that would download a file in the previous question, what part of the script will be executed next? Provide your answer using the variable name.