Hi.

On 10/10/20 15:15, G.W. Haywood via clamav-users wrote:
Hi there,

On Sat, 10 Oct 2020, mum laris via clamav-users wrote:
On 10/10/20 01:01, G.W. Haywood via clamav-users wrote:
gzip -vt FF13A1C7B9A4E5C26BE58596DF7F58E6CCB3F19F
FF13A1C7B9A4E5C26BE58596DF7F58E6CCB3F19F:
gzip: ... decompression OK, trailing garbage ignored

Trailing garbage doesn't necessarily malicious content, it could be as
simple as a carelessly coded utility which didn't do something (e.g.
terminate) correctly, but I agree with you that it's suspicious.

Do the timestamps (for example) on these files tell you anything about
where they might have come from?

only streaming video I see are youtube or netflix; if not related to any of these ones...
So parsing it ...

(function(){function r(e,n,t){function o(i,f){if(!n[i]){if(!e[i])...
And at the end of file:

//# sourceMappingURL=bundle.js.map


How can a js be cached in this way?

I know nothing about caching scripts (and almost nothing about caching
anything else) in Firefox, but I imagine that most browsers will cache
scripts in more or less the same way that they'll cache anything else.
It's all just data which would otherwise have to be transferred again.

Why not submit the file to one of the sites which will scan for
malware with multiple scanning engines, e.g. Jotti or Virustotal?

https://virusscan.jotti.org/
https://www.virustotal.com/gui/

Jotti doesn't work in my firefox profile

Viruscan says no detected engine... (safe)

Have you tried pasting the md5sum of the file(s) into a search engine?

Yeah, no result...

Thanks,

M.


_______________________________________________

clamav-users mailing list
[email protected]
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to