JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security
researchers and computer professionals
Submission permanent link 3de1224fc7b4e6d0f117e23b7842a6267aeaeb26 (Received 2012-11-13 14:53:45, http://network.adsmarket.com/click/i2lxnWPKfZmMaXLEXsp6w4xlbptfn3vDj2JrnY2egZeRYpiXYaB_l4k?dp=RMX_A4981306_P5440812_V297725066_RSan%20Francisco_S3608359_C16192165_B297569&dp2=iuy-EScPNwClEvcAAAAAANTHOAAAAAAAAgAAAAAAAAAAAP8AAAAHFSwFUwAAAAAAOgJMAAAAAAAAAAAA)
| URL | Status |
| network.adsmarket.com/click/i2lxnWPKfZmMaXLEXsp6w4xlbptfn3vDj2JrnY2egZeRYpiXYaB_l4k?dp=RMX_A4981306_P5440812_V297725066_RSan%20FS3608359_C16192165_B297569&dp2=iuy-EScPNwClEvcAAAAAANTHOAAAAAAAAgAAAAAAAAAAAP8AAAAHFSwFUwAAAAAAOgJMAAAAAAAAAAAAA | saved 10797 bytes a5550e2ca6930fffd255d521efa0db889a45a852 |
|
| www.facebook.com/plugins/like.php?locale=US&href=http:/www.facebook.com/pages/Ilivid/121626371218107&layout=standard&faces=false&width=526&action=like&amp | status: (referer=www.facebook.com/plugins/like.php?locale=US&href=http:/www.facebook.com/pages/Ilivid/121626371218107&layout=standard&faces=false&width=526&action=like&colorscheme=light&height=55&_noscript=1&_noscript=1) |
|
| static.ak.fbcdn.net/rsrc.php/v2/yT/r/javascript:void(0) | status: (referer=static.ak.fbcdn.net/rsrc.php/v2/yT/r/IB6isQ3EFwb.js) |
|
Warning: reading file /storagefiles/e8e2//2f4d0648d4e6234624c3630a6ccf00fd322e failed
Warning: reading file /storagefiles/f2e1//ee746f1e16e0a33d5fba9e4eb56859c13def failed
Warning: reading file /storagefiles/00e3//905f0d6e07d05159f3f1bf4195c384042cf0 failed
Warning: reading file /storagefiles/6de5//fd5c391faa1349c31b410f9186fd9b65bdbb failed
All Malicious or Suspicious Elements of Submission
suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
network.adsmarket.com/click/i2lxnWPKfZmMaXLEXsp6w4xlbptfn3vDj2JrnY2egZeRYpiXYaB_l4k?dp=RMX_A4981306_P5440812_V297725066_RSan FS3608359_C16192165_B297569&dp2=iuy-EScPNwClEvcAAAAAANTHOAAAAAAAAgAAAAAAAAAAAP8AAAAHFSwFUwAAAAAAOgJMAAAAAAAAAAAAA benign[nothing detected] network.adsmarket.com/click/i2lxnWPKfZmMaXLEXsp6w4xlbptfn3vDj2JrnY2egZeRYpiXYaB_l4k?dp=RMX_A4981306_P5440812_V297725066_RSan FS3608359_C16192165_B297569&dp2=iuy-EScPNwClEvcAAAAAANTHOAAAAAAAAgAAAAAAAAAAAP8AAAAHFSwFUwAAAAAAOgJMAAAAAAAAAAAAA
status: (referer=http:/www.ask.com/web?q=puppies)saved 10797 bytes a5550e2ca6930fffd255d521efa0db889a45a852
info: [script] network.adsmarket.com/scripts/lp.js
info: [iframe] network.adsmarket.com/click/
info: [img] network.adsmarket.com/click/./logo.png
info: [img] network.adsmarket.com/click/./greencheck.png
info: [iframe] www.facebook.com/plugins/like.php?locale=US&href=http%3A%2F%2Fwww.facebook.com%2Fpages%2FIlivid%2F121626371218107&layout=standard&faces=false&width=526&action=like&colorscheme=light&height=55
info: [img] network.adsmarket.com/images/406/popupClose.gif
info: [img] network.adsmarket.com/images/406/popupBtn.gif
info: [decodingLevel=0] found JavaScript
error: undefined variable initPage
error: undefined function initPage
file: a5550e2ca6930fffd255d521efa0db889a45a852: 10797 bytes
Decoded Filesa555/0e2ca6930fffd255d521efa0db889a45a852 from network.adsmarket.com/click/i2lxnWPKfZmMaXLEXsp6w4xlbptfn3vDj2JrnY2egZeRYpiXYaB_l4k?dp=RMX_A4981306_P5440812_V297725066_RSan FS3608359_C16192165_B297569&dp2=iuy-EScPNwClEvcAAAAAANTHOAAAAAAAAgAAAAAAAAAAAP8AAAAHFSwFUwAAAAAAOgJMAAAAAAAAAAAAA (10797 bytes, 1697 hidden)
download
network.adsmarket.com/click/ benign[nothing detected] (iframe) network.adsmarket.com/click/
status: (referer=network.adsmarket.com/click/i2lxnWPKfZmMaXLEXsp6w4xlbptfn3vDj2JrnY2egZeRYpiXYaB_l4k?dp=RMX_A4981306_P5440812_V297725066_RSan FS3608359_C16192165_B297569&dp2=iuy-EScPNwClEvcAAAAAANTHOAAAAAAAAgAAAAAAAAAAAP8AAAAHFSwFUwAAAAAAOgJMAAAAAAAAAAAAA)saved 70 bytes 563d7b92428c1d6db4d8c0e7a249b4e24a358354
info: [0] no JavaScript
file: 563d7b92428c1d6db4d8c0e7a249b4e24a358354: 70 bytes
Decoded Files563d/7b92428c1d6db4d8c0e7a249b4e24a358354 from network.adsmarket.com/click/ (70 bytes)
download
www.facebook.com/plugins/like.php?locale=US&href=http:/www.facebook.com/pages/Ilivid/121626371218107&layout=standard&faces=false&width=526&action=like&colorscheme=light&height=55&_nos benign[nothing detected] (metarefresh) www.facebook.com/plugins/like.php?locale=US&href=http:/www.facebook.com/pages/Ilivid/121626371218107&layout=standard&faces=false&width=526&action=like&colorscheme=light&height=55&_noscript=1
status: (referer=www.facebook.com/plugins/like.php?locale=US&href=http:/www.facebook.com/pages/Ilivid/121626371218107&layout=standard&faces=false&width=526&action=like&colorscheme=light&height=55)saved 16130 bytes 9d3e468528095f556a33d73af8e8d105cae321c6
info: [meta refresh] URL=www.facebook.com/plugins/like.php?locale=US&amp%3Bamp%3Bhref=http%3A%2F%2Fwww.facebook.com%2Fpages%2FIlivid%2F121626371218107&amp%3Bamp%3Blayout=standard&amp%3Bamp%3Bfaces=false&amp%3Bamp%3Bwidth=526&amp%3Bamp%3Baction=like&amp%3Bamp%3Bcolorscheme=light&amp%3Bamp%3Bheight=55&amp%3B_noscript=1&_noscript=1
info: [script] static.ak.fbcdn.net/rsrc.php/v2/yE/r/lxxNOOTHA0B.js
info: [script] static.ak.fbcdn.net/rsrc.php/v2/y-/r/rYSJ6xqwc9w.js
info: [script] static.ak.fbcdn.net/rsrc.php/v2/yT/r/IB6isQ3EFwb.js
info: [decodingLevel=0] found JavaScript
error: undefined variable require
error: undefined function require
error: line:3: SyntaxError: missing = in XML attribute:
error: line:3: <!DOCTYPE html>
error: line:3: ..............^
file: 9d3e468528095f556a33d73af8e8d105cae321c6: 16130 bytes
Decoded Files9d3e/468528095f556a33d73af8e8d105cae321c6 from www.facebook.com/plugins/like.php?locale=US&amp;href=http:/www.facebook.com/pages/Ilivid/121626371218107&amp;layout=standard&amp;faces=false&amp;width=526&amp;action=like&amp;colorscheme=light&amp;height=55&_nos (16130 bytes, 26 hidden)
download
www.facebook.com/plugins/like.php?locale=US&amp;amp;href=http:/www.facebook.com/pages/Ilivid/121626371218107&amp;amp;layout=standard&amp;amp;faces=false&amp;amp;width=526&amp;amp;action=like&amp;amp;colorscheme=light&a benign[nothing detected] (metarefresh) www.facebook.com/plugins/like.php?locale=US&amp;amp;href=http:/www.facebook.com/pages/Ilivid/121626371218107&amp;amp;layout=standard&amp;amp;faces=false&amp;amp;width=526&amp;amp;action=like&amp;amp;colorscheme=light&amp;amp;height=55&amp;_noscript=1&_noscript=1
status: (referer=www.facebook.com/plugins/like.php?locale=US&amp;href=http:/www.facebook.com/pages/Ilivid/121626371218107&amp;layout=standard&amp;faces=false&amp;width=526&amp;action=like&amp;colorscheme=light&amp;height=55&_noscript=1)saved 16276 bytes b469144c3d38788a6d5d53bf397f851be63b2fc8
info: [meta refresh] URL=www.facebook.com/plugins/like.php?locale=US&amp%3Bamp%3Bamp%3Bhref=http%3A%2F%2Fwww.facebook.com%2Fpages%2FIlivid%2F121626371218107&amp%3Bamp%3Bamp%3Blayout=standard&amp%3Bamp%3Bamp%3Bfaces=false&amp%3Bamp%3Bamp%3Bwidth=526&amp%3Bamp%3Bamp%3Baction=like&amp%3Bamp%3Bamp%3Bcolorscheme=light&amp%3Bamp%3Bamp%3Bheight=55&amp%3Bamp%3B_noscript=1&amp%3B_noscript=1&_noscript=1
info: [script] static.ak.fbcdn.net/rsrc.php/v2/yE/r/lxxNOOTHA0B.js
info: [script] static.ak.fbcdn.net/rsrc.php/v2/y-/r/rYSJ6xqwc9w.js
info: [script] static.ak.fbcdn.net/rsrc.php/v2/yT/r/IB6isQ3EFwb.js
file: b469144c3d38788a6d5d53bf397f851be63b2fc8: 16276 bytes
Decoded Filesb469/144c3d38788a6d5d53bf397f851be63b2fc8 from www.facebook.com/plugins/like.php?locale=US&amp;amp;href=http:/www.facebook.com/pages/Ilivid/121626371218107&amp;amp;layout=standard&amp;amp;faces=false&amp;amp;width=526&amp;amp;action=like&amp;amp;colorscheme=light&a (16276 bytes, 26 hidden)
download
static.ak.fbcdn.net/rsrc.php/v2/yT/r/IB6isQ3EFwb.js benign[nothing detected] (script) static.ak.fbcdn.net/rsrc.php/v2/yT/r/IB6isQ3EFwb.js
status: (referer=www.facebook.com/plugins/like.php?locale=US&href=http:/www.facebook.com/pages/Ilivid/121626371218107&layout=standard&faces=false&width=526&action=like&colorscheme=light&height=55)saved 83047 bytes 98860969196627fc74b4b23e2e317e988a7bb0ff
info: [iframe] static.ak.fbcdn.net/rsrc.php/v2/yT/r/javascript:void(0)
info: [decodingLevel=0] found JavaScript
error: line:3: SyntaxError: missing ; before statement:
error: line:3: is.getNodes();if(n.length===1){this._rootNode=n[0];}else{var o=document.createDocumentFragment();for(var p=0;p<n.length><(\w+)[^>]*?)\/>/g,function(y,z,aa){return aa.match(/^(abbr|br|col|img|input|link|meta|param|hr|area|embed)$/i)?y:z+'></'+aa+'>';});var
error: line:3: .........................................................................................................................................................................................................................................................^
error: undefined variable __d
error: undefined function __d
suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
file: 98860969196627fc74b4b23e2e317e988a7bb0ff: 83047 bytes
file: e8e22f4d0648d4e6234624c3630a6ccf00fd322e: 83518 bytes
file: f2e1ee746f1e16e0a33d5fba9e4eb56859c13def: 83710 bytes
file: 00e3905f0d6e07d05159f3f1bf4195c384042cf0: 83424 bytes
file: 6de5fd5c391faa1349c31b410f9186fd9b65bdbb: 83548 bytes
Decoded Files9886/0969196627fc74b4b23e2e317e988a7bb0ff from static.ak.fbcdn.net/rsrc.php/v2/yT/r/IB6isQ3EFwb.js (83047 bytes)
downloade8e2/2f4d0648d4e6234624c3630a6ccf00fd322e from static.ak.fbcdn.net/rsrc.php/v2/yT/r/IB6isQ3EFwb.js
f2e1/ee746f1e16e0a33d5fba9e4eb56859c13def from static.ak.fbcdn.net/rsrc.php/v2/yT/r/IB6isQ3EFwb.js
00e3/905f0d6e07d05159f3f1bf4195c384042cf0 from static.ak.fbcdn.net/rsrc.php/v2/yT/r/IB6isQ3EFwb.js
6de5/fd5c391faa1349c31b410f9186fd9b65bdbb from static.ak.fbcdn.net/rsrc.php/v2/yT/r/IB6isQ3EFwb.js
static.ak.fbcdn.net/rsrc.php/v2/yE/r/ benign[nothing detected] (script) static.ak.fbcdn.net/rsrc.php/v2/yE/r/
status: (referer=static.ak.fbcdn.net/rsrc.php/v2/yE/r/lxxNOOTHA0B.js)saved 7 bytes 6b64d02a1d919caf3a622f63da154771d0aaf0de
file: 6b64d02a1d919caf3a622f63da154771d0aaf0de: 7 bytes
Decoded Files6b64/d02a1d919caf3a622f63da154771d0aaf0de from static.ak.fbcdn.net/rsrc.php/v2/yE/r/ (7 bytes)
download
static.ak.fbcdn.net/rsrc.php/v2/yE/r/lxxNOOTHA0B.js benign[nothing detected] (script) static.ak.fbcdn.net/rsrc.php/v2/yE/r/lxxNOOTHA0B.js
status: (referer=www.facebook.com/plugins/like.php?locale=US&href=http:/www.facebook.com/pages/Ilivid/121626371218107&layout=standard&faces=false&width=526&action=like&colorscheme=light&height=55)saved 58823 bytes e2559d9c2e3998a7e00c5836ca496476deaea607
info: [script] static.ak.fbcdn.net/rsrc.php/v2/yE/r/
info: [decodingLevel=0] found JavaScript
error: undefined variable document.documentElement.className
error: line:1: SyntaxError: missing ; before statement:
error: line:1: var document.documentElement.className = 1;
error: line:1: ....^
file: e2559d9c2e3998a7e00c5836ca496476deaea607: 58823 bytes
Decoded Filese255/9d9c2e3998a7e00c5836ca496476deaea607 from static.ak.fbcdn.net/rsrc.php/v2/yE/r/lxxNOOTHA0B.js (58823 bytes)
download
network.adsmarket.com/scripts/lp.js benign[nothing detected] (script) network.adsmarket.com/scripts/lp.js
status: (referer=network.adsmarket.com/click/i2lxnWPKfZmMaXLEXsp6w4xlbptfn3vDj2JrnY2egZeRYpiXYaB_l4k?dp=RMX_A4981306_P5440812_V297725066_RSan FS3608359_C16192165_B297569&dp2=iuy-EScPNwClEvcAAAAAANTHOAAAAAAAAgAAAAAAAAAAAP8AAAAHFSwFUwAAAAAAOgJMAAAAAAAAAAAAA)saved 297 bytes eb259840ac70f4ce1b879d242e342a8ce67ce423
info: [0] no JavaScript
file: eb259840ac70f4ce1b879d242e342a8ce67ce423: 297 bytes
Decoded Fileseb25/9840ac70f4ce1b879d242e342a8ce67ce423 from network.adsmarket.com/scripts/lp.js (297 bytes)
download
www.facebook.com/plugins/like.php?locale=US&href=http:/www.facebook.com/pages/Ilivid/121626371218107&layout=standard&faces=false&width=526&action=like&colorscheme=light&height=55 benign[nothing detected] (iframe) www.facebook.com/plugins/like.php?locale=US&href=http:/www.facebook.com/pages/Ilivid/121626371218107&layout=standard&faces=false&width=526&action=like&colorscheme=light&height=55
status: (referer=network.adsmarket.com/click/i2lxnWPKfZmMaXLEXsp6w4xlbptfn3vDj2JrnY2egZeRYpiXYaB_l4k?dp=RMX_A4981306_P5440812_V297725066_RSan FS3608359_C16192165_B297569&dp2=iuy-EScPNwClEvcAAAAAANTHOAAAAAAAAgAAAAAAAAAAAP8AAAAHFSwFUwAAAAAAOgJMAAAAAAAAAAAAA)saved 15996 bytes baead3613e9d55e676b4b4116200943f610e7ab9
info: [meta refresh] URL=www.facebook.com/plugins/like.php?locale=US&amp%3Bhref=http%3A%2F%2Fwww.facebook.com%2Fpages%2FIlivid%2F121626371218107&amp%3Blayout=standard&amp%3Bfaces=false&amp%3Bwidth=526&amp%3Baction=like&amp%3Bcolorscheme=light&amp%3Bheight=55&_noscript=1
info: [script] static.ak.fbcdn.net/rsrc.php/v2/yE/r/lxxNOOTHA0B.js
info: [script] static.ak.fbcdn.net/rsrc.php/v2/y-/r/rYSJ6xqwc9w.js
info: [script] static.ak.fbcdn.net/rsrc.php/v2/yT/r/IB6isQ3EFwb.js
info: [decodingLevel=0] found JavaScript
error: undefined variable require
error: undefined function require
error: line:3: SyntaxError: missing = in XML attribute:
error: line:3: <!DOCTYPE html>
error: line:3: ..............^
file: baead3613e9d55e676b4b4116200943f610e7ab9: 15996 bytes
Decoded Filesbaea/d3613e9d55e676b4b4116200943f610e7ab9 from www.facebook.com/plugins/like.php?locale=US&href=http:/www.facebook.com/pages/Ilivid/121626371218107&layout=standard&faces=false&width=526&action=like&colorscheme=light&height=55 (15996 bytes, 26 hidden)
download
static.ak.fbcdn.net/rsrc.php/v2/y-/r/rYSJ6xqwc9w.js benign[nothing detected] (script) static.ak.fbcdn.net/rsrc.php/v2/y-/r/rYSJ6xqwc9w.js
status: (referer=www.facebook.com/plugins/like.php?locale=US&href=http:/www.facebook.com/pages/Ilivid/121626371218107&layout=standard&faces=false&width=526&action=like&colorscheme=light&height=55)saved 10308 bytes d06bd9e6fd4e6cb0ac088c4e675e8c2dc8bf6833
file: d06bd9e6fd4e6cb0ac088c4e675e8c2dc8bf6833: 10308 bytes
Decoded Filesd06b/d9e6fd4e6cb0ac088c4e675e8c2dc8bf6833 from static.ak.fbcdn.net/rsrc.php/v2/y-/r/rYSJ6xqwc9w.js (10308 bytes)
download