Benign Download

VirusShare_823f2b1add52a43a1c46ec606a775d8d

Dynamically loads script elementEncoded content decoded: hex

SHA-25631947ce9b56b4358f07ec635197df18e72b8745e2c30d010ebcbc5f5d3e7e302

Evidence

Dynamically loads script element lines 12–22

⋯4 lines
16  (function() {
17
18    var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
19
20    ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
21
22    var s = document. …

JavaScript comment contains a URL lines 54–66

54:15… text/javascript">
55
56//SuckerTree Horizontal Menu (Sept 14th, 06)
57
58//By Dynamic Drive: http://www.dynamicdrive.com/style/
⋯8 lines

HTTP login path lines 119–122

119:150… 
120
121<td width="34%" align="right">
122<span class="navitem"><a href="http://www.bullypedia.net/americanbully/php_users/htdocs/login.php?returnto=%2Famericanbully%2Fphp_users%2Fhtdocs%2Flogin.php%3Freturnto%3D%252Famericanbully%252Findex.php">[ Login ]</a></sp …

Encoded content decoded: hex line 190

190:299… you will need to email <span class="__cf_email__" data-cfemail="65071009091c1500010c04060017110c030c0001251c040d0a0a4b060a08">[email&#160;protected]</span> to get started OR download & complete our Certification …