Open-source atomic malware analysis

Analyze another

4ec44044115de90bef49a58b2bff35d2.js

JAVASCRIPT
Verdict: BENIGN
SHA256: 3cf2f40dcefb02205eb35f71210c4e5f8cf80569c315e5f1af63368472ba96ac
Mal-ecule
O(S)H(Cm₃)
Size 2.5 KB download
First seen 93 days ago
Analyzed 90 days ago

Well-known

component severity, 95% confident.
lib fetch/XMLHttpRequest/http(s) require (flatted tamper fragment)

Objectives

notable severity, 88% confident.
supply-chain/hidden-payload/extensions Sends postMessage to iframe
baseline severity, 90% confident.
anti-static/obfuscation/code-metrics Minified/compressed code (multiple indicators)
baseline severity, 80% confident.
anti-static/obfuscation/string Variable-based split with token delimiter
component severity, 86% confident.
execution/lure Regex component marker
component severity, 90% confident.
supply-chain/credential-theft Regex component marker
component severity, 95% confident.
supply-chain/recon-exfil Regex component marker

Micro-behaviors

notable severity, 72% confident.
communications/http fetch with POST method
notable severity, 80% confident.
communications/http/request fetch() API call (JavaScript)
notable severity, 85% confident.
communications/ipc Window/worker postMessage event listener
baseline severity, 82% confident.
data/string JavaScript substring search call
baseline severity, 90% confident.
dylib/library Async I/O library (libevent, libev, etc.)
component severity, 100% confident.
data/encode .toString() method call
component severity, 84% confident.
data/text/keywords password/token/api_key field keyword
component severity, 84% confident.
fs/file Regex component marker
component severity, 100% confident.
ui/window/manage DOM or CSS size property

Metadata

baseline severity, 85% confident.
file/text High function density
baseline severity, 95% confident.
import imports import
baseline severity, 95% confident.
lang JavaScript or TypeScript basename
baseline severity, 100% confident.
lang/encoded JavaScript file basename

20 of 25 traits shown

Identity

SHA-256 3cf2f40dcefb02205eb35f71210c4e5f8cf80569c315e5f1af63368472ba96ac
Filename 4ec44044115de90bef49a58b2bff35d2.js

Origin

Source harvest

Timeline

First seen 21 May 2026 17:15 UTC
First analyzed 24 May 2026 23:25 UTC
Last analyzed 24 May 2026 23:25 UTC
Last updated 24 May 2026 23:25 UTC

Labeling

Label good
Label source harvest
Traits version 9ea7c