JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 477f6eabd5b17075b90877a6a0aa9d43537bd1e6 (Received 2013-12-16 15:26:52, http://jlyse.net/?LwbgfX4 Password.txt)

URLStatus
jlyse.net/?LwbgfX4 saved 12778 bytes 6bad747ca64fa1d233935cbcac6fbc7b4afc8ea1

cleanfiles.net/js/undefined status: (referer=cleanfiles.net/js/jquery-1.7.2.min.js)

www.google-analytics.com/ga.js status: (referer=www.ask.com/web?q=puppies)

www.ask.com/st/c/js/web-b0a8a4056fb4319d6f666d4ce21e169db8bfbc58.js status: (referer=www.ask.com/web?q=puppies)

www.ask.com/st/c/js/unified-846e61d9870534b40a64bd4c1252bf1d0f50c43f.js status: (referer=www.ask.com/web?q=puppies)

ajax.googleapis.com/ajax/libs/jquery/1.3.2/jquery.min.js status: (referer=axxomoviesofficial.blogspot.com/)

cleanfiles.net/js/ status: (referer=cleanfiles.net/js/dwn8.js?v=17)

s7.addthis.com/js/300/widget.js#pubid=xa-50cd68bf69789c90 status: (referer=axxomoviesofficial.blogspot.com/)

b.scorecardresearch.com/beacon.js status: (referer=www.ask.com/web?q=puppies)

jk.revolvermaps.com/p.js status: (referer=axxomoviesofficial.blogspot.com/)

www.googleadservices.com/pagead/conversion.js status: (referer=www.ask.com/web?q=puppies)

ajax.googleapis.com/ajax/libs/jqueryui/1.5.3/jquery-ui.min.js status: (referer=axxomoviesofficial.blogspot.com/)

www.ask.com/match?c=a&qid=D4225F8E6435795A467C97115EF03FF5&o=0&l=dir&ip=d109ef65&uid=&id=&page=1&q=puppies&cl=aj-cat-sp2&qsrc=121&dqi=&ch=20015-t2,dirN status: (referer=www.ask.com/web?q=puppies)

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
cleanfiles.net/js/jquery-1.7.2.min.js benign
[nothing detected] (script) cleanfiles.net/js/jquery-1.7.2.min.js
     status: (referer=jlyse.net/?LwbgfX4)saved 94847 bytes d10284c274eb76443d3fd444e293b5de36fe0a2e
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [decodingLevel=0] found JavaScript
     error: undefined function p.getElementsByTagName
     error: undefined variable p
     info: [element] URL=cleanfiles.net/js/undefined
     info: [1] no JavaScript
     file: d10284c274eb76443d3fd444e293b5de36fe0a2e: 94847 bytes
     file: d5dba94a76a67a54f2b98b16227da20414542fd9: 72 bytes

Decoded Files
d102/84c274eb76443d3fd444e293b5de36fe0a2e from cleanfiles.net/js/jquery-1.7.2.min.js (94847 bytes, 10 hidden) download

d5db/a94a76a67a54f2b98b16227da20414542fd9 from cleanfiles.net/js/jquery-1.7.2.min.js (72 bytes) download


cleanfiles.net/df.php?id=102464 benign
[nothing detected] (var downloadURL) cleanfiles.net/df.php?id=102464
     status: (referer=jlyse.net/?LwbgfX4)saved 36 bytes 7182b08fd33effe1f6b463f952cbfea2927ac79a
     file: 7182b08fd33effe1f6b463f952cbfea2927ac79a: 36 bytes

Decoded Files
7182/b08fd33effe1f6b463f952cbfea2927ac79a from cleanfiles.net/df.php?id=102464 (36 bytes) download


www.ask.com/web?q=puppies benign
[nothing detected] (var fileReferrer) www.ask.com/web?q=puppies
     status: (referer=jlyse.net/?LwbgfX4)saved 102266 bytes 49e51d7e1f8c3689f7d16a851b3ed8f53b8ae2ee
     info: [javascript variable] URL=www.ask.com/match?c=a&qid=D4225F8E6435795A467C97115EF03FF5&o=0&l=dir&ip=d109ef65&uid=&id=&page=1&q=puppies&cl=aj-cat-sp2&qsrc=121&dqi=&ch=20015-t2,dirN
     info: [img] sp.ask.com/sh/i/a14/c/generic.png
     info: [img] sa.aos.ask.com/us/an/tr/puppy-and-kitten.jpg
     info: [img] rpmedia.ask.com/ts?u=/wikipedia/commons/thumb/e/e8/GoldenRetrieverPuppyDaisyParker.JPG/65px-GoldenRetrieverPuppyDaisyParker.JPG
     info: [img] sp.ask.com/sh/i/a14/spinner.gif
     info: [img] www.ask.com/
     info: [img] media.mysearchsolution.com/e?t=14030393952408208004
     info: [img] media2.picsearch.com/is?EI8xH4s-UDhDy-F1a5II7WvUe6IrxIl3YXw6XL2p83M
     info: [img] media4.picsearch.com/is?D57GnhIdHNMPk3tQl5eL-vGyc0IPLSeHnhqF7PqoIhw
     info: [img] media5.picsearch.com/is?DIDxVvnVRUTtgMxP8zuwZfScfD5MCA_1sYLUVA7TI8I
     info: [img] media5.picsearch.com/is?JNLruMa6T6S4VoMNtD6zZk1vPKfgPzMcEIwpPSF12zA
     info: [img] media4.picsearch.com/is?979Aox0Lc1b-6ftFUUKm0VeIRCuCwxBAxktB0eqRcNg
     info: [img] media2.picsearch.com/is?16o-_0U1MfN9UZxI7lqE3fqlIIO7mNIsRicZeG-TpQE
     info: [img] media5.picsearch.com/is?N-2euhYGOcCCAINWjGgyCkPeNZdOI9Y2t5CAw
     info: [img] media4.picsearch.com/is?jNWjnNBJfoF7jiccFm1hZcm9uILxmQcHsm9DEg79dSE
     info: [script] www.ask.com/st/c/js/web-b0a8a4056fb4319d6f666d4ce21e169db8bfbc58.js
     info: [script] www.ask.com/st/c/js/unified-846e61d9870534b40a64bd4c1252bf1d0f50c43f.js
     info: [img] wzus1.ask.com/i/i.gif?t=v&d=us&s=a&c=a&app=a16&dqi=&askid=&l=dir&o=0&oo=0&sv=0a5cabee&ip=d109ef65&p=%2Fweb&rf=jlyse.net%2F%3FLwbgfX4&ord=837014&cu.wz=0
     info: [script] www.google-analytics.com/ga.js
     info: [script] b.scorecardresearch.com/beacon.js
     info: [img] b.scorecardresearch.com/p?c1=2&c2=6034776&c3=&c4=&c5=&c6=&c15=&cj=1
     info: [script] www.googleadservices.com/pagead/conversion.js
     info: [img] googleads.g.doubleclick.net/pagead/viewthroughconversion/1003219837/?value=0&guid=ON&script=0
     info: [decodingLevel=0] found JavaScript
     error: undefined variable e
     info: [element] URL=www.google.com/adsense/search/async-ads.js
     info: [1] no JavaScript
     file: 49e51d7e1f8c3689f7d16a851b3ed8f53b8ae2ee: 102266 bytes
     file: 738f7952a0d1234aa7e8d7ed1539cbfdd6db88ce: 110 bytes

Decoded Files
49e5/1d7e1f8c3689f7d16a851b3ed8f53b8ae2ee from www.ask.com/web?q=puppies (102266 bytes, 25796 hidden) download

738f/7952a0d1234aa7e8d7ed1539cbfdd6db88ce from www.ask.com/web?q=puppies (110 bytes) download


cleanfiles.net/js/dwn8.js?v=17 benign
[nothing detected] (script) cleanfiles.net/js/dwn8.js?v=17
     status: (referer=jlyse.net/?LwbgfX4)saved 3918 bytes c1b3686097b49736bb4611f7518de0e3c79c6af3
     info: [javascript variable] URL=
     info: [iframe] cleanfiles.net/js/
     file: c1b3686097b49736bb4611f7518de0e3c79c6af3: 3918 bytes

Decoded Files
c1b3/686097b49736bb4611f7518de0e3c79c6af3 from cleanfiles.net/js/dwn8.js?v=17 (3918 bytes, 862 hidden) download


axxomoviesofficial.blogspot.com/ benign
[nothing detected] (var newurl) axxomoviesofficial.blogspot.com/
     status: (referer=jlyse.net/?LwbgfX4)saved 114007 bytes a20793c6e6e71cbfd8fa2c3ec0875e1af21c5511
     info: [img] axxomoviesofficial.blogspot.com/
     info: [img] img1.blogblog.com/img/icon18_allbkg.png
     info: [img] cdn1.share.slickpic.com/u/DjukaBegovic/Slider/org/the-guilt-trip-seth-rogen-barbra-streisand-2/web.jpg
     info: [img] cdn1.share.slickpic.com/u/DjukaBegovic/Slider/org/2012_0013/web.jpg
     info: [img] cdn1.share.slickpic.com/u/DjukaBegovic/Slider/org/jack-reacher-tom-cruise/web.jpg
     info: [img] cdn1.share.slickpic.com/u/DjukaBegovic/Slider/org/-ea3892940aa4fbb1/web.jpg
     info: [img] cdn1.share.slickpic.com/u/DjukaBegovic/Slider/org/trailer-zero-dark-thirty-11351/web.jpg
     info: [img] 4.bp.blogspot.com/-K6qZpRZAsF4/Uqw5riUQHlI/AAAAAAAABvw/vsI2eWKSsu4/s320/Grudge-Match-2013-Movie-Poster.jpg
     info: [img] 3.bp.blogspot.com/-0RNmgPnOLmU/UPLO9pjAalI/AAAAAAAABN0/yoRnRSuhm5U/s320/D10.png
     info: [img] 4.bp.blogspot.com/-7hD_chZvE/Uqw5XxLbJdI/AAAAAAAABvo/v3q3xnoOJsw/s320/47Ronin-poster3.jpg
     info: [img] 2.bp.blogspot.com/-2bZwgOr54C0/Uqw5EAm6VXI/AAAAAAAABvg/b2PqeiCBR_o/s320/wolfofwallstreetposter2.jpg
     info: [img] 4.bp.blogspot.com/-KKvVYjOEwhM/Uqw4bN8jUaI/AAAAAAAABvQ/MP0zOwcdpRE/s320/MV5BMjA0NTgwOTk5Ml5BMl5BanBnXkFtZTcwMjE3NDc5OQ@@._V1_.jpg
     info: [img] 4.bp.blogspot.com/-AvHMe2nrUK8/Uqw3-5JKpoI/AAAAAAAABvI/UOW-f8Ghl9M/s320/3bf2e981.jpg
     info: [img] 1.bp.blogspot.com/-YlkFLKPYDMM/Uqw3ck-jKiI/AAAAAAAABu8/5WzilIZtrjI/s320/Disneytwenty-5-4-Winter2013-Cover-sm-copyright-2.jpg
     info: [img] 4.bp.blogspot.com/-JAENNN56OAc/Uqw3LFL4A9I/AAAAAAAABu0/KBzE-PPhb5k/s320/american-hustle-poster.jpg
     info: [img] 2.bp.blogspot.com/-xOeNmsNVTbY/Uqw2w-S460I/AAAAAAAABuo/FtNIIXtATiQ/s320/anchorman-2-the-legend-continues.jpg
     info: [img] 2.bp.blogspot.com/-I-eW5LGmysg/Uqw2ZKoFKoI/AAAAAAAABug/Aqiew3HN7mo/s320/A+Madea+Christmas+(2013).jpg
     info: [img] 1.bp.blogspot.com/-Uoog-PBIGN8/Uqw1vbVRljI/AAAAAAAABuY/D4fTQ9i63j8/s320/the-desolation-of-smaug-cover-03.jpg
     info: [img] 3.bp.blogspot.com/-BEEriOGwnF8/Upc2TSFaQiI/AAAAAAAABrE/0qSfVtk9D0M/s320/111.jpg
     info: [img] 3.bp.blogspot.com/-D1riDPuB-tI/Upc1xlIaG3I/AAAAAAAABq8/EqTLq9F2i3E/s320/99.jpg
     info: [img] 4.bp.blogspot.com/-M5ekvG1Jm5g/Upc1WY8T8nI/AAAAAAAABq0/5gfDND211kc/s320/88.jpg
     info: [img] 1.bp.blogspot.com/-zc8qr8FYDCY/Upc1DPUujsI/AAAAAAAABqs/T_ZntVu3KI0/s320/77.jpg
     info: [img] 1.bp.blogspot.com/-oNNfpNpQLuM/Upc0pir4WoI/AAAAAAAABqk/nZ7uOklebj0/s320/66.jpg
     info: [img] 4.bp.blogspot.com/-8BCfqltCNes/Upc0P68TbaI/AAAAAAAABqc/aqnNpvAYskg/s320/55.jpg
     info: [img] 2.bp.blogspot.com/-CshnNF-6WLU/UpczzY-uK4I/AAAAAAAABqU/QvuI7d1QFt0/s320/44.jpeg
     info: [img] 1.bp.blogspot.com/-iKMjzGYGbP4/UpczVSbC63I/AAAAAAAABqM/gk6_bWg9-dc/s320/33.jpg
     info: [img] 1.bp.blogspot.com/-FduGnJPK7KI/Upcy0TsE4oI/AAAAAAAABqE/EXicfGRYVoc/s320/22.jpg
     info: [img] 3.bp.blogspot.com/-MmzioqeeGzM/Upcx-ApSZ7I/AAAAAAAABp4/Grxhfu4_EE8/s320/11.png
     info: [script] jk.revolvermaps.com/p.js
     info: [script] ajax.googleapis.com/ajax/libs/jquery/1.3.2/jquery.min.js
     info: [script] ajax.googleapis.com/ajax/libs/jqueryui/1.5.3/jquery-ui.min.js
     info: [script] s7.addthis.com/js/300/widget.js#pubid=xa-50cd68bf69789c90
     info: [script] www.blogger.com/static/v1/widgets/58075626-widgets.js
     info: [script] apis.google.com/js/plusone.js
     info: [decodingLevel=0] found JavaScript
     error: undefined function div.getElementsByTagName
     error: undefined variable div
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE html PUBLIC "-/W3C/DTD XHTML 1.0 Strict/EN" "http:/www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
          error: line:3: ...............^
     file: a20793c6e6e71cbfd8fa2c3ec0875e1af21c5511: 114007 bytes

Decoded Files
a207/93c6e6e71cbfd8fa2c3ec0875e1af21c5511 from axxomoviesofficial.blogspot.com/ (114007 bytes, 57 hidden) download


jlyse.net/bootstrap/bootstrap.min.js benign
[nothing detected] (script) jlyse.net/bootstrap/bootstrap.min.js
     status: (referer=jlyse.net/?LwbgfX4)saved 28631 bytes 6cac446414fc48189a14a5d1a2611aa54cab75c2
     info: [decodingLevel=0] found JavaScript
     suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
     file: 6cac446414fc48189a14a5d1a2611aa54cab75c2: 28631 bytes
     file: ba9311a1b03fe5d14794b27453c13032691a8145: 28857 bytes
     file: c8377e00a70e7e2cb7ad34971b71c1a123db75d8: 28863 bytes
     file: 956c5a25712d6f7d672107c38d90ea65240fd63c: 29072 bytes
     file: 8de455e7870d05ef93780c843bd40b7569a7b958: 29264 bytes
     file: 2b080c62cdd9ca363dfacca023a5d9c727f3110c: 28978 bytes
     file: 72f1a03cfef6c2aff2f09866a1edb2d9b3b3f21c: 29102 bytes

Decoded Files
6cac/446414fc48189a14a5d1a2611aa54cab75c2 from jlyse.net/bootstrap/bootstrap.min.js (28631 bytes) download

ba93/11a1b03fe5d14794b27453c13032691a8145 from jlyse.net/bootstrap/bootstrap.min.js (28857 bytes) download

c837/7e00a70e7e2cb7ad34971b71c1a123db75d8 from jlyse.net/bootstrap/bootstrap.min.js (28863 bytes) download

956c/5a25712d6f7d672107c38d90ea65240fd63c from jlyse.net/bootstrap/bootstrap.min.js (29072 bytes) download

8de4/55e7870d05ef93780c843bd40b7569a7b958 from jlyse.net/bootstrap/bootstrap.min.js (29264 bytes) download

2b08/0c62cdd9ca363dfacca023a5d9c727f3110c from jlyse.net/bootstrap/bootstrap.min.js (28978 bytes) download

72f1/a03cfef6c2aff2f09866a1edb2d9b3b3f21c from jlyse.net/bootstrap/bootstrap.min.js (29102 bytes) download


jlyse.net/?LwbgfX4 benign
[nothing detected] jlyse.net/?LwbgfX4
     status: (referer=http:/www.ask.com/web?q=puppies)saved 12778 bytes 6bad747ca64fa1d233935cbcac6fbc7b4afc8ea1
     info: [script] cleanfiles.net/js/jquery-1.7.2.min.js
     info: [script] cleanfiles.net/js/dwn8.js?v=17
     info: [img] jlyse.net/images/icons/32px/txt.png
     info: [img] jlyse.net/images/fbg1_icon.png
     info: [img] jlyse.net/images/fbg2_icon.png
     info: [img] jlyse.net/images/fbg3_icon.png
     info: [script] jlyse.net/bootstrap/bootstrap.min.js
     info: [img] jlyse.net/images/loading.gif
     info: [decodingLevel=0] found JavaScript
     error: undefined variable $
     error: undefined function $
     info: [var fileReferrer] URL=http:/www.ask.com/web?q=puppies
     info: [var downloadURL] URL=cleanfiles.net/df.php?id=102464
     info: [var facebookShareURL] URL=axxomoviesofficial.blogspot.com/
     info: [var newurl] URL=axxomoviesofficial.blogspot.com/
     info: [decodingLevel=1] found JavaScript
     file: 6bad747ca64fa1d233935cbcac6fbc7b4afc8ea1: 12778 bytes
     file: b048640ea55522e03b0b54c94d91b1a59f3acc46: 296 bytes

Decoded Files
6bad/747ca64fa1d233935cbcac6fbc7b4afc8ea1 from jlyse.net/?LwbgfX4 (12778 bytes, 1152 hidden) download

b048/640ea55522e03b0b54c94d91b1a59f3acc46 from jlyse.net/?LwbgfX4 (296 bytes) download


apis.google.com/js/plusone.js benign
[nothing detected] (script) apis.google.com/js/plusone.js
     status: (referer=axxomoviesofficial.blogspot.com/)saved 10074 bytes 9a75d9ee77623626e5ee6c44d6bd3df7bb2a5aaa
     file: 9a75d9ee77623626e5ee6c44d6bd3df7bb2a5aaa: 10074 bytes

Decoded Files
9a75/d9ee77623626e5ee6c44d6bd3df7bb2a5aaa from apis.google.com/js/plusone.js (10074 bytes) download


www.blogger.com/static/v1/widgets/58075626-widgets.js benign
[nothing detected] (script) www.blogger.com/static/v1/widgets/58075626-widgets.js
     status: (referer=axxomoviesofficial.blogspot.com/)saved 88673 bytes 0fe43723b70beb29155c7dccf5166c3f2a372b0e
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     file: 0fe43723b70beb29155c7dccf5166c3f2a372b0e: 88673 bytes

Decoded Files
0fe4/3723b70beb29155c7dccf5166c3f2a372b0e from www.blogger.com/static/v1/widgets/58075626-widgets.js (88673 bytes) download


www.google.com/adsense/search/async-ads.js benign
[nothing detected] (element) www.google.com/adsense/search/async-ads.js
     status: (referer=www.ask.com/web?q=puppies)saved 374 bytes d9e3644f4465d3a195ebdfee82cd0c7881011ae6
     file: d9e3644f4465d3a195ebdfee82cd0c7881011ae6: 374 bytes

Decoded Files
d9e3/644f4465d3a195ebdfee82cd0c7881011ae6 from www.google.com/adsense/search/async-ads.js (374 bytes) download