Benign Download

Cardiology

Contains a hardcoded insecure HTTP URLURL targets .php with query

SHA-2564dfba5c17b3c57301cc0164210bd619bfde65f1415829c5d86e1651202c66c45

URLhttps://en.wikipedia.org/wiki/Cardiology

Evidence

Regex scans cookies via document.cookie.match line 6

6:588… or-toc-available skin-thumbsize-clientpref-standard";var cookie=document.cookie.match(/(?:^|; )enwikimwclientpreferences=([^;]+)/);if(cookie){cookie[1].split('%2C').forEach(function(pref){className=className.replace(new RegExp('(^| )'+pref.replace(/-clientpref-\w+$|[^\w-]+/g,'')+'-clientpref-\\w+( |$)'),'$1'+pr …

Contains a hardcoded remote HTTP(S) URL lines 18–20

18:26… ion" content="telephone=no">
19<meta property="og:image" content="https://upload.wikimedia.org/wikipedia/commons/thumb/6/67/Heart_diagram_blood_flow_en.svg/1280px-Heart_diagram_blood_flow_en.svg.png">
20<meta property="og:im …

Contains Arabic or Urdu script line 842

842:673… i class="interlanguage-link interwiki-ar mw-list-item"><a href="https://ar.wikipedia.org/wiki/%D8%B7%D8%A8_%D8%A7%D9%84%D9%82%D9%84%D8%A8" title="طب القلب – Arabic" lang="ar" hreflang="ar" data-title="طب القلب" data-language-autonym="العربية" data-language-local-name="Arabic" class="interlang …

Contains a Cyrillic script sequence line 842

842:2264… 0%D1%80%D0%B4%D1%8B%D1%8F%D0%BB%D1%91%D0%B3%D1%96%D1%8F" title="Кардыялёгія – Belarusian (Taraškievica orthography)" lang="be-tarask" hreflang="be-tarask" data-title="Кардыялёгія" data-language-autonym="Беларуская (тарашкевіца)" data-language-local …

Contains Bengali script line 842

842:3689… C%E0%A6%BF%E0%A6%9C%E0%A7%8D%E0%A6%9E%E0%A6%BE%E0%A6%A8" title="হৃদবিজ্ঞান – Bangla" lang="bn" hreflang="bn" data-title="হৃদবিজ্ঞান" data-language-autonym="বাংলা" data-la …