Benign Download

VirusShare_6ac4fd46b2dd539230021bf3f49d8a9c

Dynamically loads script elementCalls JavaScript split()
SHA-2567a25320cd30670cd786be81d43e4faed2b645f1da76e974ba0e4d17bbc5cf026

Evidence

Calls JavaScript split() lines 1–11
1(function(){
2var bp = document.createElement('script');
3var curProtocol = window.location.protocol.split(':')[0];
4if (curProtocol === 'https') {
5bp.src = 'https://zz.bdstatic.com/linksubmit/push.js';
⋯6 lines
Hex arithmetic in string operations lines 46–53
46:178… 示按钮|打开方式
47 var configtg='0xffffff|0|0x3FA61F|5|0xffffff|0xC5DDBC|0x000033|2|3|1|_blank';
48 var files = "";
49 var links = "";
⋯4 lines

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.