JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 024da0d0d2bfb9d765d97f6a4fed7eb2a6917679 (Received 2017-08-12 20:31:16, https://cf9-weirdjs.surge.sh )

URLStatus
cf9-weirdjs.surge.sh saved 157560 bytes 3c0ac92a211df6061c18478966472606b701c515

All Malicious or Suspicious Elements of Submission

suspicious: Warning detected /warning CVE-NO-MATCH Shellcode Engine Length 157504
cf9-weirdjs.surge.sh/ suspicious
[suspicious:5] (ipaddr:138.197.235.123) cf9-weirdjs.surge.sh/
     status: (referer=http:/www.ask.com/web?q=puppies)saved 157560 bytes 3c0ac92a211df6061c18478966472606b701c515
     info: [decodingLevel=0] found JavaScript
     info: Decoding option navigator.systemLanguage=en and navigator.systemLanguage=zh-cn and browser=IE7/XP and browser=IE8/Vista and browser=Opera and browser=Firefox,      55 bytes
     info: Decoding option navigator.systemLanguage=en and navigator.systemLanguage=zh-cn and browser=IE7/XP and browser=IE8/Vista and browser=Opera and browser=Firefox,      0 bytes
     suspicious: Warning detected /warning CVE-NO-MATCH Shellcode Engine Length 157504
     info: [1] no JavaScript
     info: file: saved cf9-weirdjs.surge.sh/ to (3c0ac92a211df6061c18478966472606b701c515)
     file: 3c0ac92a211df6061c18478966472606b701c515: 157560 bytes
     file: ce643daaad2e29282c94f16e17d6b2d2bbb6d4cb: 55 bytes

Decoded Files
3c0a/c92a211df6061c18478966472606b701c515 from cf9-weirdjs.surge.sh/ (157560 bytes, 41 hidden) download

ce64/3daaad2e29282c94f16e17d6b2d2bbb6d4cb from cf9-weirdjs.surge.sh/ (55 bytes) download