Benign Download

97fc7f8107a83b2686e624fbf69b6219

Many Base64-like comment spans in JavaScriptRepeated hex arithmetic over numeric constants

SHA-2568351f890d6eaaffee0cf7693b5be8e8ca6fd4b342b4469ae1ae810149612848c

Evidence

Hexadecimal 0xff token line 300

300:350… , -0x109, -0x135, -'0xd4', -0x157, -0x136, -'0xfd', -'0x1c9', -'0xff', -'0x192', -0xb4, -'0xdb', -'0xe1', -0x138, -'0x115', -'0x11d', -0x191, -'0xb7', -'0x19d', -'0x188', -'0x13d', -0x11b, -0x19d)) / (-0x15d0 + -0x36d * -0x1 + 0x1264) * (-parseInt(decadentlyatmospherium(-'0x214', -0x285, -0x214, -'0x2a3', -'0x293', -'0x291', -'0x25b', -0x20a, -'0x28c', -'0x27 …

Repeated hex arithmetic over numeric constants line 300

300:1063… 0x274', -'0x1e6', -0x1f5, -0x1ae, -0x1c3, -0x1f1, -'0x1cc')) / (-0x1 * -0x1913 + -0x23c6 + 0xab5)) + parseInt(pearliness(0x17d, '0x19f', '0x1ab', '0x129', 0x92, '0x143', 0xf7, 0xd9, 0x1ae, '0xcb', '0xcf', '0x1b1', '0x13a', ' …

Hexadecimal 0x3f token line 300

300:3267… ', '0x3b', -'0x37', '0x14', '0x47', '0x76', -'0x73', -'0x87', -'0x3f', 0x76, -0x18, -0x55, '0x81', -0x5b, -0x89, 0x8f, -0x8e, 0x11, '0x3b', -0xe, -'0x19', '0x10', 0xd, -'0x5d', -0x3d, 0x68, -'0x1a …

Dense computed-property call cluster (3+) lines 301–309

69… 
              break;
          } else {
              woodfall['push'](woodfall['shift']());
          }
      } catch (untirequadrupedous) {
          woodfall['push'](woodfall['shift']());
      }
  }

JavaScript embeds a lower-first Base64 alphabet lines 331–338

55… (-0xc0 * -0x3 + -0x60c + 0x1 * 0x51a);
      var blastoma = coagents[lawbreakersmassacred];
      if (NextJSaniconism['fRdQXM'] === undefined) {
          var equantprussification = function (calyptraeathirstful) {
              var mizzler = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';
              var allentatooverdainty = '';
              var triakisoctahedrallegalizing = '';
              for (var orbiculate = -0x1 * -0xa7a + -0xa02 + 0xf * -0x8, poristicalundertrader, vituperationsbloome …