Benign Download

Norethisterone

Contains a hardcoded insecure HTTP URLURL targets .php with query

SHA-2568c31cdfd80f35afaabdfbec50c29fd8d6dbc4d06725c959e647ca80e962e0f5d

URLhttps://en.wikipedia.org/wiki/Norethisterone

Evidence

Regex scans cookies via document.cookie.match line 6

6:588… or-toc-available skin-thumbsize-clientpref-standard";var cookie=document.cookie.match(/(?:^|; )enwikimwclientpreferences=([^;]+)/);if(cookie){cookie[1].split('%2C').forEach(function(pref){className=className.replace(new RegExp('(^| )'+pref.replace(/-clientpref-\w+$|[^\w-]+/g,'')+'-clientpref-\\w+( |$)'),'$1'+pr …

Contains a hardcoded remote HTTP(S) URL lines 18–23

18:26… ion" content="telephone=no">
19<meta property="og:image" content="https://upload.wikimedia.org/wikipedia/commons/thumb/d/d4/Norethisterone.svg/1280px-Norethisterone.svg.png">
20<meta property="og:image:width" content="1200">
21<meta property="og:image:height" content="874">
22<meta name="viewport" content="width=1120">
23<me …

Contains Hiragana or Katakana script line 794

794:4103… B%E3%82%A8%E3%83%81%E3%82%B9%E3%83%86%E3%83%AD%E3%83%B3" title="ノルエチステロン – Japanese" lang="ja" hreflang="ja" data-title="ノルエチステロン" data-language-autonym="日本語" data-language-local-name="Japanese" class="interlanguage-link-target"><span>日本語</span></a></li><li class="interlanguage- …

URL targets .php endpoint line 1027

1027:13070… .edu (3D interactive model)"><a rel="mw:ExtLink nofollow" href="https://chemapps.stolaf.edu/jmol/jmol.php?model=C%5BC%40%5D12CC%5BC%40H%5D3%5BC%40H%5D%28%5BC%40%40H%5D1CC%5BC%40%5D2%28C%23C%29O%29CCC4%3DCC%28%3DO%29CC%5BC%40H%5D34" class="external text">Interactive image</a></span></li></ul> …

Contains a hardcoded insecure HTTP URL line 1334

1334:5130… 6112947"},"doi":{"wt":"10.1080/13697130500148875"},"url":{"wt":"http://hormonebalance.org/images/documents/Kuhl%2005%20%20Pharm%20Estro%20Progest%20Climacteric_1313155660.pdf"},"s2cid":{"wt":"24616324"},"access-date": …