Benign Download

Pyrimethanil

Contains a hardcoded insecure HTTP URLURL targets .php with query

SHA-256c8f12ebdffbee8f2d4fc7212e93b0a0e6db484dee70f0a5b8c2dd17e51019cc7

URLhttps://en.wikipedia.org/wiki/Pyrimethanil

Evidence

Regex scans cookies via document.cookie.match line 6

6:588… or-toc-available skin-thumbsize-clientpref-standard";var cookie=document.cookie.match(/(?:^|; )enwikimwclientpreferences=([^;]+)/);if(cookie){cookie[1].split('%2C').forEach(function(pref){className=className.replace(new RegExp('(^| )'+pref.replace(/-clientpref-\w+$|[^\w-]+/g,'')+'-clientpref-\\w+( |$)'),'$1'+pr …

Contains a hardcoded remote HTTP(S) URL lines 18–20

18:26… ion" content="telephone=no">
19<meta property="og:image" content="https://upload.wikimedia.org/wikipedia/commons/thumb/e/e2/Pyrimethanil_Structure_V.1.svg/1280px-Pyrimethanil_Structure_V.1.svg.png">
20<meta property="og:imag …

Contains Arabic or Urdu script line 354

354:8…  class="interlanguage-link interwiki-azb mw-list-item"><a href="https://azb.wikipedia.org/wiki/%D9%BE%DB%8C%D8%B1%DB%8C%D9%88%D9%85%D8%AA%D8%A7%D9%86%DB%8C%D9%84" title="پیریومتانیل – South Azerbaijani" lang="azb" hreflang="azb" data-title="پیریومتانیل" data-language-autonym="تۆرکجه" data-language-local-name="South Azerbaijani" class=" …

Contains a Cyrillic script sequence line 354

354:2317… ata-title="Pirimetanil" data-language-autonym="Srpskohrvatski / српскохрватски" data-language-local-name="Serbo-Croatian" class="interlanguage-link-target"><span>Srpskohrvatski / српскохрватск� …

Contains Han-script text line 354

354:3386… tps://zh.wikipedia.org/wiki/%E5%98%A7%E9%9C%89%E8%83%BA" title="嘧霉胺 – Chinese" lang="zh" hreflang="zh" data-title="嘧霉胺" data-language-autonym="中文" data-language-local-name="Chinese" class="interlanguage-lin …