Benign Download

HIV

Contains a hardcoded insecure HTTP URLURL targets .php with query

SHA-256c9fef15e842dcd7adccba9bd55195e9614fced920b8ea504cb95d8592753f1cb

URLhttps://en.wikipedia.org/wiki/HIV

Evidence

Regex scans cookies via document.cookie.match line 6

6:588… or-toc-available skin-thumbsize-clientpref-standard";var cookie=document.cookie.match(/(?:^|; )enwikimwclientpreferences=([^;]+)/);if(cookie){cookie[1].split('%2C').forEach(function(pref){className=className.replace(new RegExp('(^| )'+pref.replace(/-clientpref-\w+$|[^\w-]+/g,'')+'-clientpref-\\w+( |$)'),'$1'+pr …

Contains a hardcoded remote HTTP(S) URL lines 18–23

18:26… ion" content="telephone=no">
19<meta property="og:image" content="https://upload.wikimedia.org/wikipedia/commons/thumb/1/1a/HIV-budding-Color.jpg/1280px-HIV-budding-Color.jpg">
20<meta property="og:image:width" content="1200">
21<meta property="og:image:height" content="797">
22<meta name="viewport" content="width=1120">
23<me …

Contains Hiragana or Katakana script line 603

603:18722… B%E4%B8%8D%E5%85%A8%E3%82%A6%E3%82%A4%E3%83%AB%E3%82%B9" title="ヒト免疫不全ウイルス – Japanese" lang="ja" hreflang="ja" data-title="ヒト免疫不全ウイルス" data-language-autonym="日本語" …

Contains a hardcoded insecure HTTP URL line 1187

1187:1042… .116-a426"},"bibcode":{"wt":"2008EnvHP.116.a426M"},"url":{"wt":"http://www.ehponline.org/members/2008/116-10/focus.html"},"url-status":{"wt":"dead"},"archive-url":{"wt":"https://web.archive.org/web/20081106182431/htt …

URL targets .php endpoint lines 1772–1773

1772:201… IRMNG</a>: <span class="uid"><a rel="mw:ExtLink nofollow" href="https://www.irmng.org/aphia.php?p=taxdetails&amp;id=11460007" class="external text">11460007</a></span></span></li>
1773<li><span style="white-space:nowrap;"><a rel …