Windows Analysis Report
https://sqcconnect.com/editor/?audio=82bbc753fb82587736ffdf0df4ddb367:525c842416fd7327ee9fe3c658ce04c498788ab4db1c9c6b3cf5182b33d6839f

{
    "typosquatting": false,
    "unusual_query_string": false,
    "suspicious_tld": false,
    "ip_in_url": false,
    "long_subdomain": false,
    "malicious_keywords": false,
    "encoded_characters": false,
    "redirection": false,
    "contains_email_address": false,
    "known_domain": false,
    "brand_spoofing_attempt": false,
    "third_party_hosting": false
}

URL: https://sqcconnect.com

{
    "risk_score": 7,
    "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code. It appears to be collecting sensitive user information and sending it to external domains, which is highly suspicious. While some of the behaviors could be related to legitimate functionality like analytics or error reporting, the overall aggressive and opaque nature of the script raises significant security concerns."
}

function a0_0x4347() { const _0xc84a2d = ['yncScriptI', 'AAABCAYAAA', 'reasons', 'PVyGZ', 'wGPbe', 'hiEQn', '_evaluate', 'permission', 'eBAFU', 'AfFcSJAAAA', 'calledSele', 'gger', 'OrLqN', 'Error\x20fetc', 'ssions:', 'g_renderer', 'scroll', 'r_unwrappe', 'floor', '$chrome_as', 'cdc_adoQpo', 'WetYV', 'vCWxQ', '3338588rii', '9084138CmaPTx', 'DOMContent', 'Touch\x20even', 'mediaDevic', 'oVZbU', 'use\x20activi', 'le\x20device', 'webdriver', 'alMovement', 'nssRH', 'SqctD', 'llvmpipe', '(((.+)+)+)', 'vent', 'gg==', 'Error\x20send', 'essPattern', '4qMTsuh', 'timeStamp', 'hjBps', 'Opera', 'notificati', 'KwoLz', 'jienD', 'DeRmi', 'nium', '3480XzhGyv', 'checkKeyPr', '1066790gXL', 'voiceData', 'stringify', '1734135gXa', 'FINIX', 'string', 'Chrome', 'ActivityTi', 'ent', 'userAgent', 'includes', 'match', 'ement', '__fxdriver', 'Points', 'name', 'WZSJQ', 'MTpqH', 'availHeigh', 'Akn', 'eOffset', '_info', 'suspicious', 'Context', 'state', 'pbWZi', '4,iVBORw0K', 'getFullYea', 'map', 'GpniM', 'LDPeV', '__selenium', 'platform', 'asnfa76pfc', 'PRssd', 'IDE_Record', 'oZakM', 'YubkG', 'PwnGg', 'dhidD', 'NXEcp', '4551932dOA', 'cpIXU', 'SxNdO', 'eoJaC', 'vtECd', 'TPGPp', 'checkForSu', 'Mobile/Tab', 'mlMVa', 'Error\x20chec', 'llEvent', 'mouseEvent', 'interactio', 'numberOfVo', 'nSummary', '61RkMNoJ', 'applicatio', 'getHours', 'cDvJg', '_phantom', 'Content-Ty', 'counter', 'version', 'ata', 'ZLmcfl_Sym', 'a-zA-Z_$][', 'checkScrol', '$]*)', 'cCZEZ', 'KON', 'init', 'random', '73341rmENc', 'canvas', 'touchmove', 'CSyUT', 'getMonth', 'lastScroll', 'getMinutes', 'oIhph', 'PovNr', 'toLowerCas', 'XcuRb', 'experiment', 'initEventL', 'lastActivi', 'al-webgl', 'runtime', 'zjGST', 'lastKeyEve', 'hesis', 'geb', 'callPhanto', 'JIqmD', 'win', 'yGK', 'possibleBo', 'Desktop', 'search', 'chrome', '_selenium', 'fMjpg', 'zhYvH', 'teraction\x20', 'zKfpO', 'hing\x20UA\x20Fu', 'while\x20(tru', '0-9a-zA-Z_', 'sYWYr', '__driver_u', 'ZLmcfl_Arr', 'document', 'bol', 'tyTime', 'n\x20patterns', 'addEventLi', 'length', 'DQottAAAAA', '4776968zwcSig', '\x20detected', 'MfCnr', 'nactivity\x20', 'scrollEven', 'webgl', 'domAutomat', 'keydown', 'yvoNr', 'stateObjec', 'GgoAAAANSU', 'ices', 'XCUtf', 'fNUje', '\x5c(\x20*\x5c)', 'WfHAl', 'scrollY', 'UNMASKED_V', 'padStart', 'DBmzn', 'fXJrf', 'POST', 'EsEhQ', 'navigator', 'RNZxS', 'VhZQr', 'chain', 'getTimezon', 'msMaxTouch', 'indexedDB', 'avior', 'updateLast', 'languages', 'Multiple\x20s', 'linux', 'anged', 'ore', 'mise', 'HTTP\x20error', 'clientX', 'ZCqFD', 'fSENg', 'mousemove', 'UNMASKED_R', 'AoVBF', 'bSBgi', 'ionControl', 'uspicious\x20', 'icUtt', 'behaviorSc', 'ropyValues', 'hEUgAAAAEA', 'WEBGL_debu', 'CklEQVR4nG', 'XZIGU', 'TyubM', 'tWZIN', 'push', '_Selenium_', 'PYq', 'CqgZW', '__webdrive', 'documentEl', 'anti', 'now', 'height', 'zkNMR', 'img', 'ints', 'JNWzi', 'OsjSX', 'cdybB', 'handleKeyE', 'Loaded', 'ENDOR_WEBG', '__nightmar', 'Internet\x20E', 'e)\x20{}', 'Contextify', 'BGL', 'JEkPz', 'IOKIE', 'uaFullVers', 'click', 'eEtYm', 'fqlkf', 'Tablet', 'bIwsi', 'bind', 'touchEvent', 'RtnWj', 'src', 'stener', 'Unknown', 'xmrpM', 'speechSynt', 'EnblT', 'DJMCh', 'fkuHF', 'deviceType', '4121274Fiw', 'action', 'nXaqD', 'RUJev', 'clientY', 'availWidth', 'getUserMed', 'analyzeBeh', 'lastMouseE', 'orientatio', 'Diff', 'MAAQAABQAB', 'pHqOM', 'getHighEnt', 'eEvent', 'XesSu', 'WvgFG', '!\x20status:\x20', '215hhWCuj', 'wiGbF', 'filter', 'FPUkQ', 'unknown', 'FpkYi', 'khTlG', 'RTCPeerCon', 'detected', 'apply', 'constructo', 'driver', 'handleMous', 'indexOf', 'prompt', '44364WajLvF', 'swiftshade', 'vgdig', 'TpgdO', 'Patterns', 'Edge', 'iHYgO', 'ler', 'some', 'getExtensi', 'hEvent', 'CWivc', 'getSeconds', 'KYcVo', 'onmousemov', 'voBPA', 'lang', 'nection', 'Extended\x20i', 'abs', 'YPoyT', '_unwrapped', 'king\x20permi', 'userAgentD', 'DGcky', 'ing\x20data:', 'lRatio', 'Firefox', 'isteners', 'status', 'bQItP', 'vCXeO', '2323530CnwPcC', 'devicePixe', '/png;base6', 'TGgSs', 'isMobileOr', 'QGXjq', 'wysap', 'ion', 'plugins', 'let', 'DGBMP', 'BJRU5ErkJg', 'APcoq', 'iXrX