Open-source atomic malware analysis

Analyze another

G_T2jHu5QI8J

UNKNOWN
Verdict: BENIGN
Mal-ecule
H₃(Cm₄DbOs)
Size 22.7 KB download
First seen 34 days ago
Analyzed 34 days ago
Package https://web.archive.org/web/20250915161221/https://groups.google.com/forum/#!original/mod.sources/OqVZYQNSmDs/G_T2jHu5QI8J

Referenced by 1 sample

G_T2jHu5QI8J javascript
1 <!doctype html><html lang="en-US" dir="ltr"><head><script type="text/javascript" src="https://web-static.archive.org/_static/js/bundle-playback.js?v=2N_sDSC0" charset="utf-8"></script>
2 <script type="text/javascript" src="https://web-static.archive.org/_static/js/wombat.js?v=o9P2E1FK" charset="utf-8"></script>
3 <script>window.RufflePlayer=window.RufflePlayer||{};window.RufflePlayer.config={"autoplay":"on","unmuteOverlay":"hidden","showSwfDownload":true};</script>
11 <link rel="stylesheet" type="text/css" href="https://web-static.archive.org/_static/css/iconochive.css?v=3PDvdIFv" />
12 <!-- End Wayback Rewrite JS Include -->
13 <base href="https://web.archive.org/web/20250915161221/https://groups.google.com/"><link rel="preconnect" href="//web.archive.org/web/20250915161221/https://www.gstatic.com/"><meta name="referrer" content="origin"><script nonce="_21-kPR7jgInd9p8ntk-eA">window['ppConfig'] = {productName: 'GroupsFrontendRedirectsUi', deleteIsEnforced: true , sealIsEnforced: true , heartbeatRate: 0.5 , periodicReportingRateMillis: 60000.0 , disableAllReporting: false };(function(){'use strict';function k(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var l=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype||a==Object.prototype)return a;a[b]=c.value;return a};
14 function m(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=m(this);function p(a,b){if(b)a:{var c=n;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&l(c,a,{configurable:!0,writable:!0,value:b})}}
15 function q(a){var b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:k(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}p("Object.is",function(a){return a?a:function(b,c){return b===c?b!==0||1/b===1/c:b!==b&&c!==c}});
16 p("Array.prototype.includes",function(a){return a?a:function(b,c){var d=this;d instanceof String&&(d=String(d));var e=d.length;c=c||0;for(c<0&&(c=Math.max(c+e,0));c<e;c++){var f=d[c];if(f===b||Object.is(f,b))return!0}return!1}});
17 p("String.prototype.includes",function(a){return a?a:function(b,c){if(this==null)throw new TypeError("The 'this' value for String.prototype.includes must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype.includes must not be a regular expression");return this.indexOf(b,c||0)!==-1}});function r(a,b,c){a("https://web.archive.org/web/20250915161221/https://csp.withgoogle.com/csp/proto/"+encodeURIComponent(b),JSON.stringify(c))}function t(){var a;if((a=window.ppConfig)==null?0:a.disableAllReporting)return function(){};var b,c,d,e;return(e=(b=window)==null?void 0:(c=b.navigator)==null?void 0:(d=c.sendBeacon)==null?void 0:d.bind(navigator))!=null?e:u}function u(a,b){var c=new XMLHttpRequest;c.open("POST",a);c.send(b)} Sends an XMLHttpRequest
18 function v(){var a=(w=Object.prototype)==null?void 0:w.__lookupGetter__("__proto__"),b=x,c=y;return function(){var d=a.call(this),e,f,g,h;r(c,b,{type:"ACCESS_GET",origin:(f=window.location.origin)!=null?f:"unknown",report:{className:(g=d==null?void 0:(e=d.constructor)==null?void 0:e.name)!=null?g:"unknown",stackTrace:(h=Error().stack)!=null?h:"unknown"}});return d}}
19 function z(){var a=(A=Object.prototype)==null?void 0:A.__lookupSetter__("__proto__"),b=x,c=y;return function(d){d=a.call(this,d);var e,f,g,h;r(c,b,{type:"ACCESS_SET",origin:(f=window.location.origin)!=null?f:"unknown",report:{className:(g=d==null?void 0:(e=d.constructor)==null?void 0:e.name)!=null?g:"unknown",stackTrace:(h=Error().stack)!=null?h:"unknown"}});return d}}function B(a,b){C(a.productName,b);setInterval(function(){C(a.productName,b)},a.periodicReportingRateMillis)}
20 var D="constructor __defineGetter__ __defineSetter__ hasOwnProperty __lookupGetter__ __lookupSetter__ isPrototypeOf propertyIsEnumerable toString valueOf __proto__ toLocaleString x_ngfn_x".split(" "),E=D.concat,F=navigator.userAgent.match(/Firefox\/([0-9]+)\./),G=(!F||F.length<2?0:Number(F[1])<75)?["toSource"]:[],H;if(G instanceof Array)H=G;else{for(var I=q(G),J,K=[];!(J=I.next()).done;)K.push(J.value);H=K}var L=E.call(D,H),M=[]; Reads browser identity or display input
21 function C(a,b){for(var c=[],d=q(Object.getOwnPropertyNames(Object.prototype)),e=d.next();!e.done;e=d.next())e=e.value,L.includes(e)||M.includes(e)||c.push(e);e=Object.prototype;d=[];for(var f=0;f<c.length;f++){var g=c[f];d[f]={name:g,descriptor:Object.getOwnPropertyDescriptor(Object.prototype,g),type:typeof e[g]}}if(d.length!==0){c=q(d);for(e=c.next();!e.done;e=c.next())M.push(e.value.name);var h;r(b,a,{type:"SEAL",origin:(h=window.location.origin)!=null?h:"unknown",report:{blockers:d}})}};var N=Math.random(),O=t(),P=window.ppConfig;P&&(P.disableAllReporting||P.deleteIsEnforced&&P.sealIsEnforced||N<P.heartbeatRate&&r(O,P.productName,{origin:window.location.origin,type:"HEARTBEAT"}));var y=t(),Q=window.ppConfig;if(Q)if(Q.deleteIsEnforced)delete Object.prototype.__proto__;else if(!Q.disableAllReporting){var x=Q.productName;try{var w,A;Object.defineProperty(Object.prototype,"__proto__",{enumerable:!1,get:v(),set:z()})}catch(a){}}
22 (function(){var a=t(),b=window.ppConfig;b&&(b.sealIsEnforced?Object.seal(Object.prototype):b.disableAllReporting||(document.readyState!=="loading"?B(b,a):document.addEventListener("DOMContentLoaded",function(){B(b,a)})))})();}).call(this);
23 </script><link rel="canonical" href="https://web.archive.org/web/20250915161221/https://groups.google.com/forum/"><script data-id="_gd" nonce="_21-kPR7jgInd9p8ntk-eA">window.WIZ_global_data = {"DpimGf":false,"EP1ykd":["/_/*"],"FdrFJe":"-1000683581812530783","HiPsbb":1,"Im6cmf":"/_/GroupsFrontendRedirectsUi","LVIXXb":1,"LoQv7e":false,"MT7f9b":[],"MUE6Ne":"GroupsFrontendRedirectsUi","PLnRge":"https://web.archive.org/web/20250915161221/https://docs.google.com/picker","QrtxK":"","S06Grb":"","S6lZl":112976253,"TSDtV":"%.@.[[null,[[45447917,null,true,null,null,null,\"OeRc3d\"],[45447918,null,true,null,null,null,\"paZwJ\"],[45706195,null,true,null,null,null,\"qktsSc\"],[45709804,null,false,null,null,null,\"PoJR0\"],[45640778,null,true,null,null,null,\"PA9pfe\"],[45697011,null,true,null,null,null,\"xNsvyb\"],[45448406,null,false,null,null,null,\"jKfwq\"],[45674794,null,false,null,null,null,\"gHxQo\"],[45447921,null,false,null,null,null,\"qAj4w\"],[45655177,null,true,null,null,null,\"VvKUq\"],[45447945,null,true,null,
24 a.l=function(e){function g(b){var c={};c[b]=k();a.cc_latency.push(c)}function m(b){var c=n("iml");b.setAttribute("data-iml",c);return c}a.cc_aid=e;a.iml_start=a.cc_latency_start_time;a.css_size=0;a.cc_latency=[];a.ccTick=g;a.onJsLoad=function(){g("jsl")};a.onCssLoad=function(){g("cssl")};a._isVisible=function(b,c){if(!c||c.style.display=="none")return!1;var f=b.defaultView;if(f&&f.getComputedStyle&&(f=f.getComputedStyle(c),f.height=="0px"||f.width=="0px"||f.visibility=="hidden"))return!1;if(!c.getBoundingClientRect)return!0;
25 var h=c.getBoundingClientRect();c=h.left+a.pageXOffset;f=h.top+a.pageYOffset;if(f+h.height<0||c+h.width<0||h.height<=0||h.width<=0)return!1;b=b.documentElement;return f<=(a.innerHeight||b.clientHeight)&&c<=(a.innerWidth||b.clientWidth)};a._recordImlEl=m;document.documentElement.addEventListener("load",function(b){b=b.target;var c;b.tagName!="IMG"||b.hasAttribute("data-iid")||a._isLazyImage(b)||b.hasAttribute("data-noaft")||(c=m(b));if(a.aft_counter&&(b=a.aft_counter.indexOf(b),b!==-1&&(b=a.aft_counter.splice(b,
26 1).length===1,a.aft_counter.length===0&&b&&c)))a.onaft(c)},!0);a.prt=-1;a.wiz_tick=function(){var b=n("prt");a.prt=b}};}).call(this);
27 l('MEDrxc')</script><script nonce="_21-kPR7jgInd9p8ntk-eA">var _F_cssRowKey = 'boq-groups.GroupsFrontendRedirectsUi.FDCqYRrwl-w.L.B1.O';var _F_combinedSignature = 'ALAdxDmtoPEuqZlALU_MNCEjwWM6VDR90Q';function _DumpException(e) {throw e;}</script><style data-href="https://www.gstatic.com/_/mss/boq-groups/_/ss/k=boq-groups.GroupsFrontendRedirectsUi.FDCqYRrwl-w.L.B1.O/am=AAIDWwAE/d=1/ed=1/rs=ALAdxDmtBe2eKeZ2Dbw5LoIDZ6_P1nANmA/m=gdfclientredirectview,_b,_tp" nonce="mIbAZgTRCfcFj5lVm7FcRQ">html,body{height:100%;overflow:hidden}body{-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;color:rgba(0,0,0,.87);font-family:Roboto,RobotoDraft,Helvetica,Arial,sans-serif;margin:0;text-size-adjust:100%}textarea{font-family:Roboto,RobotoDraft,Helvetica,Arial,sans-serif}a{text-decoration:none;color:#2962ff}img{border:none}*{-webkit-tap-highlight-color:transparent}#apps-debug-tracers{display:none}html,body{overflow:visible}body{overflow-y:scroll}/*# sourceMappingURL=chrome.css.map */.kFwPee{height:100%}.ydMMEb{
36 */
37 var m=["focus","blur","error","load","toggle"];function n(a){return a==="mouseenter"?"mouseover":a==="mouseleave"?"mouseout":a==="pointerenter"?"pointerover":a==="pointerleave"?"pointerout":a};function p(a){this.l={};this.m={};this.i=null;this.g=[];this.o=a}p.prototype.handleEvent=function(a,b,c){q(this,{eventType:a,event:b,targetElement:b.target,eic:c,timeStamp:Date.now(),eia:void 0,eirp:void 0,eiack:void 0})};function q(a,b){if(a.i)a.i(b);else{b.eirp=!0;var c;(c=a.g)==null||c.push(b)}}
38 function r(a,b,c){if(!(b in a.l)&&a.o){var e=function(f,d,B){a.handleEvent(f,d,B)};a.l[b]=e;c=n(c||b);if(c!==b){var h=a.m[c]||[];h.push(b);a.m[c]=h}a.o.addEventListener(c,function(f){return function(d){e(b,d,f)}},void 0)}}p.prototype.j=function(a){return this.l[a]};p.prototype.ecrd=function(a){this.i=a;var b;if((b=this.g)==null?0:b.length){for(a=0;a<this.g.length;a++)q(this,this.g[a]);this.g=null}};var t=typeof navigator!=="undefined"&&/iPhone|iPad|iPod/.test(navigator.userAgent);function u(a){this.g=a;this.i=[]}u.prototype.addEventListener=function(a,b,c){t&&(this.g.style.cursor="pointer");var e=this.i,h=e.push,f=this.g;b=b(this.g);var d=!1;m.indexOf(a)>=0&&(d=!0);f.addEventListener(a,b,typeof c==="boolean"?{capture:d,passive:c}:d);h.call(e,{eventType:a,j:b,capture:d,passive:c})};var k="click dblclick focus focusin blur error focusout keydown keyup keypress load mouseover mouseout mouseenter mouseleave mousemove submit toggle touchstart touchend touchmove touchcancel auxclick change compositionstart composit
39 if(!(k instanceof Array)){var v;var w=typeof Symbol!="undefined"&&Symbol.iterator&&k[Symbol.iterator];if(w)v=w.call(k);else if(typeof k.length=="number")v={next:g()};else throw Error(String(k)+" is not an iterable or ArrayLike");for(var x,y=[];!(x=v.next()).done;)y.push(x.value)};var z=function(a){return{trigger:function(b){var c=a.j(b.type);c||(r(a,b.type),c=a.j(b.type));var e=b.target||b.srcElement;c&&c(b.type,b,e.ownerDocument.documentElement)},configure:function(b){b(a)}}}(function(){var a=window,b=new u(a.document.documentElement),c=new p(b);k.forEach(function(d){return r(c,d)});var e,h,f;"onwebkitanimationend"in a&&(e="webkitAnimationEnd");r(c,"animationend",e);"onwebkitanimationstart"in a&&(h="webkitAnimationStart");r(c,"animationstart",h);r(c,"animationcancel");"onwebkittransitionend"in
40 a&&(f="webkitTransitionEnd");r(c,"transitionend",f);return{u:c,container:b}}().u),A=["BOQ_wizbind"],C=window||l,D;for(;A.length&&(D=A.shift());)A.length||z===void 0?C[D]&&C[D]!==Object.prototype[D]?C=C[D]:C=C[D]={}:C[D]=z;}).call(this);
41 </script><script nocollect src="https://web.archive.org/web/20250915161221js_/https://www.gstatic.com/_/mss/boq-groups/_/js/k=boq-groups.GroupsFrontendRedirectsUi.en_US.CPTWmewrcH4.2018.O/am=AAIDWwAE/d=1/excm=_b,_tp,gdfclientredirectview/ed=1/dg=0/wt=2/ujg=1/rs=ALAdxDmiuZX5Js7ywQyLFzXjXHinF4FtWQ/dti=1/m=_b,_tp" defer id="base-js" fetchpriority="high" nonce="_21-kPR7jgInd9p8ntk-eA"></script><script nonce="_21-kPR7jgInd9p8ntk-eA">if (window.BOQ_loadedInitialJS) {onJsLoad();} else {document.getElementById('base-js').addEventListener('load', onJsLoad, false);}</script><script nonce="_21-kPR7jgInd9p8ntk-eA">
42 window['_wjdc'] = function (d) {window['_wjdd'] = d};
43 </script><title>Redirecting to Google Groups</title><script nonce="_21-kPR7jgInd9p8ntk-eA">var AF_initDataKeys = []; var AF_dataServiceRequests = {}; var AF_initDataChunkQueue = []; var AF_initDataCallback; var AF_initDataInitializeCallback; if (AF_initDataInitializeCallback) {AF_initDataInitializeCallback(AF_initDataKeys, AF_initDataChunkQueue, AF_dataServiceRequests);}if (!AF_initDataCallback) {AF_initDataCallback = function(chunk) {AF_initDataChunkQueue.push(chunk);};}</script></head><body id="yDmH0d" jscontroller="pjICDe" jsaction="rcuQ6b:npT2md; click:FAbpgf; auxclick:FAbpgf" class="tQj5Y ghyPEc IqBfM ecJEib EWZcud"><script aria-hidden="true" nonce="_21-kPR7jgInd9p8ntk-eA">window.wiz_progress&&window.wiz_progress();</script><div class="VUoKZ" aria-hidden="true"><div class="TRHLAc"></div></div><c-wiz jsrenderer="Knn06" class="SSPGKf" jsdata="deferred-i1" data-p="%.@.]" jscontroller="C5tWxd" jsaction="rcuQ6b:npT2md" data-node-index="0;0" jsmodel="hc6Ubd" view c-wiz data-ogpc><div class="T4LgNb " jsname
44 c.initAft=function(){f=0;e=Array.prototype.slice.call(document.getElementsByTagName("img")).filter(function(a){return!!a.getAttribute("data-iml")});[].forEach.call(document.getElementsByTagName("img"),function(a){try{_recordIsAboveFold(a)}catch(b){throw b.message=a.hasAttribute("data-iid")?b.message+"\nrecordIsAboveFold error for defer inlined image":b.message+("\nrecordIsAboveFold error for img element with <src: "+a.src+">"),b;}});if(d.length===0)c.onaft(f)};}).call(this);
45 initAft()</script><script id="_ij" nonce="_21-kPR7jgInd9p8ntk-eA">window.IJ_values = [[null,null,"",false,null,null,true,false],'0','https:\/\/web.archive.org\/web\/20250915161221\/https:\/\/groups.google.com\/', null ,'boq_groupsfrontendserver_20250908.07_p0','groups.google.com', 0.0 ,'','_21-kPR7jgInd9p8ntk-eA','mIbAZgTRCfcFj5lVm7FcRQ','DEFAULT','', 2025.0 ,'https:\/\/web.archive.org\/web\/20250915161221\/https:\/\/groups.google.com\/forum\/', null ,'ltr', false ,'https:\/\/web.archive.org\/web\/20250915161221\/https:\/\/accounts.google.com\/AccountChooser?continue\x3dhttps:\/\/groups.google.com\/forum\/\x26hl\x3den-US','https:\/\/web.archive.org\/web\/20250915161221\/https:\/\/accounts.google.com\/ServiceLogin?hl\x3den-US\x26continue\x3dhttps:\/\/groups.google.com\/forum\/','https:\/\/web.archive.org\/web\/20250915161221\/https:\/\/accounts.google.com\/SignOutOptions?continue\x3dhttps:\/\/groups.google.com\/forum\/', false , false , false ,'en','en-US','en_US','https:\/\/web.archive.org\/web\/2025091516122
46 FILE ARCHIVED ON 16:12:21 Sep 15, 2025 AND RETRIEVED FROM THE
47 INTERNET ARCHIVE ON 01:27:02 Jul 27, 2026.

Micro-behaviors

Metadata

Identity

SHA-256 13692a5f8a3b249891c41e503fb997346cffcabbdb397458202d134b24e839df
Filename G_T2jHu5QI8J
PURL https://web.archive.org/web/20250915161221/https://groups.google.com/forum/#!original/mod.sources/OqVZYQNSmDs/G_T2jHu5QI8J

Timeline

First seen 26 Jul 2026 21:29 UTC
First analyzed 26 Jul 2026 21:34 UTC
Last analyzed 26 Jul 2026 21:34 UTC
Last updated 27 Aug 2026 19:14 UTC

Labeling

Label unknown
Label source upload
Traits version 9266e