Benign Download

%D9%85%D9%84%D9%81:Flag_of_Germany.svg

Legitimate Wikipedia SVG page

Heavily percent-encoded XML payloadEncoded payload detected: xor

SHA-256f62925f98b7fe7da501bb2c3aee502f5b3ff4f37fe6c8e6482fcc4dcabf2e6db

URLhttps://ar.wikipedia.org/wiki/%D9%85%D9%84%D9%81:Flag_of_Germany.svg

Evidence

Percent-encoded content decoded lines 8–10

8:169… +\\","watchToken":"+\\","csrfToken":"+\\"});
9}];});});</script>
10<link rel="stylesheet" href="/w/load.php?lang=ar&amp;modules=ext.flaggedRevs.basic%7Cext.uls.interlanguage%7Cext.visualEditor.desktopArticleTarget.noscript%7Cext.wikimediames …

Heavily percent-encoded XML payload lines 35–39

35:73… توم ويكيبيديا" href="/w/index.php?title=%D8%AE%D8%A7%D8%B5:%D8%A3%D8%AD%D8%AF%D8%AB_%D8%A7%D9%84%D8%AA%D8%BA%D9%8A%D9%8A%D8%B1%D8%A7%D8%AA&amp;feed=atom">
36<link rel="dns-prefetch" href="//meta.wikimedia.org" />
37<link rel="dns-prefetch" href="auth.wikimedia.org">
38</head>
39<body class="skin--responsive skin- …

Encoded payload detected: xor line 685

685:277… .png/120px-Coat-elements-2.png" decoding="async" width="64" height="77" class="mw-file-element" srcset="https://upload.wikimedia.org/wikipedia/commons/thumb/d/d2/Coat-elements-2.png/250px-Coat-elements-2.png 2x" data-file-width="609" data …