JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 477f6eabd5b17075b90877a6a0aa9d43537bd1e6 (Received 2013-12-16 15:26:52, http://jlyse.net/?LwbgfX4 Password.txt)

URLStatus
jlyse.net/?LwbgfX4 saved 12778 bytes 6bad747ca64fa1d233935cbcac6fbc7b4afc8ea1

cleanfiles.net/js/undefined status: (referer=cleanfiles.net/js/jquery-1.7.2.min.js)

www.google-analytics.com/ga.js status: (referer=www.ask.com/web?q=puppies)

www.ask.com/st/c/js/web-b0a8a4056fb4319d6f666d4ce21e169db8bfbc58.js status: (referer=www.ask.com/web?q=puppies)

www.ask.com/st/c/js/unified-846e61d9870534b40a64bd4c1252bf1d0f50c43f.js status: (referer=www.ask.com/web?q=puppies)

ajax.googleapis.com/ajax/libs/jquery/1.3.2/jquery.min.js status: (referer=axxomoviesofficial.blogspot.com/)

cleanfiles.net/js/ status: (referer=cleanfiles.net/js/dwn8.js?v=17)

s7.addthis.com/js/300/widget.js#pubid=xa-50cd68bf69789c90 status: (referer=axxomoviesofficial.blogspot.com/)

b.scorecardresearch.com/beacon.js status: (referer=www.ask.com/web?q=puppies)

jk.revolvermaps.com/p.js status: (referer=axxomoviesofficial.blogspot.com/)

www.googleadservices.com/pagead/conversion.js status: (referer=www.ask.com/web?q=puppies)

ajax.googleapis.com/ajax/libs/jqueryui/1.5.3/jquery-ui.min.js status: (referer=axxomoviesofficial.blogspot.com/)

www.ask.com/match?c=a&qid=D4225F8E6435795A467C97115EF03FF5&o=0&l=dir&ip=d109ef65&uid=&id=&page=1&q=puppies&cl=aj-cat-sp2&qsrc=121&dqi=&ch=20015-t2,dirN status: (referer=www.ask.com/web?q=puppies)

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
cleanfiles.net/js/jquery-1.7.2.min.js benign
[nothing detected] (script) cleanfiles.net/js/jquery-1.7.2.min.js
     status: (referer=jlyse.net/?LwbgfX4)saved 94847 bytes d10284c274eb76443d3fd444e293b5de36fe0a2e
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [decodingLevel=0] found JavaScript
     error: undefined function p.getElementsByTagName
     error: undefined variable p
     info: [element] URL=cleanfiles.net/js/undefined
     info: [1] no JavaScript
     file: d10284c274eb76443d3fd444e293b5de36fe0a2e: 94847 bytes
     file: d5dba94a76a67a54f2b98b16227da20414542fd9: 72 bytes

Decoded Files
d102/84c274eb76443d3fd444e293b5de36fe0a2e from cleanfiles.net/js/jquery-1.7.2.min.js (94847 bytes, 10 hidden) download

d5db/a94a76a67a54f2b98b16227da20414542fd9 from cleanfiles.net/js/jquery-1.7.2.min.js (72 bytes) download


cleanfiles.net/df.php?id=102464 benign
[nothing detected] (var downloadURL) cleanfiles.net/df.php?id=102464
     status: (referer=jlyse.net/?LwbgfX4)saved 36 bytes 7182b08fd33effe1f6b463f952cbfea2927ac79a
     file: 7182b08fd33effe1f6b463f952cbfea2927ac79a: 36 bytes

Decoded Files
7182/b08fd33effe1f6b463f952cbfea2927ac79a from cleanfiles.net/df.php?id=102464 (36 bytes) download


www.ask.com/web?q=puppies benign
[nothing detected] (var fileReferrer) www.ask.com/web?q=puppies
     status: (referer=jlyse.net/?LwbgfX4)saved 102266 bytes 49e51d7e1f8c3689f7d16a851b3ed8f53b8ae2ee
     info: [javascript variable] URL=www.ask.com/match?c=a&qid=D4225F8E6435795A467C97115EF03FF5&o=0&l=dir&ip=d109ef65&uid=&id=&page=1&q=puppies&cl=aj-cat-sp2&qsrc=121&dqi=&ch=20015-t2,dirN
     info: [img] sp.ask.com/sh/i/a14/c/generic.png
     info: [img] sa.aos.ask.com/us/an/tr/puppy-and-kitten.jpg
     info: [img] rpmedia.ask.com/ts?u=/wikipedia/commons/thumb/e/e8/GoldenRetrieverPuppyDaisyParker.JPG/65px-GoldenRetrieverPuppyDaisyParker.JPG
     info: [img] sp.ask.com/sh/i/a14/spinner.gif
     info: [img] www.ask.com/
     info: [img] media.mysearchsolution.com/e?t=14030393952408208004
     info: [img] media2.picsearch.com/is?EI8xH4s-UDhDy-F1a5II7WvUe6IrxIl3YXw6XL2p83M
     info: [img] media4.picsearch.com/is?D57GnhIdHNMPk3tQl5eL-vGyc0IPLSeHnhqF7PqoIhw
     info: [img] media5.picsearch.com/is?DIDxVvnVRUTtgMxP8zuwZfScfD5MCA_1sYLUVA7TI8I
     info: [img] media5.picsearch.com/is?JNLruMa6T6S4VoMNtD6zZk1vPKfgPzMcEIwpPSF12zA
     info: [img] media4.picsearch.com/is?979Aox0Lc1b-6ftFUUKm0VeIRCuCwxBAxktB0eqRcNg
     info: [img] media2.picsearch.com/is?16o-_0U1MfN9UZxI7lqE3fqlIIO7mNIsRicZeG-TpQE
     info: [img] media5.picsearch.com/is?N-2euhYGOcCCAINWjGgyCkPeNZdOI9Y2t5CAw
     info: [img] media4.picsearch.com/is?jNWjnNBJfoF7jiccFm1hZcm9uILxmQcHsm9DEg79dSE
     info: [script] www.ask.com/st/c/js/web-b0a8a4056fb4319d6f666d4ce21e169db8bfbc58.js
     info: [script] www.ask.com/st/c/js/unified-846e61d9870534b40a64bd4c1252bf1d0f50c43f.js
     info: [img] wzus1.ask.com/i/i.gif?t=v&d=us&s=a&c=a&app=a16&dqi=&askid=&l=dir&o=0&oo=0&sv=0a5cabee&ip=d109ef65&p=%2Fweb&rf=jlyse.net%2F%3FLwbgfX4&ord=837014&cu.wz=0
     info: [script] www.google-analytics.com/ga.js
     info: [script] b.scorecardresearch.com/beacon.js
     info: [img] b.scorecardresearch.com/p?c1=2&c2=6034776&c3=&c4=&c5=&c6=&c15=&cj=1
     info: [script] www.googleadservices.com/pagead/conversion.js
     info: [img] googleads.g.doubleclick.net/pagead/viewthroughconversion/1003219837/?value=0&guid=ON&script=0
     info: [decodingLevel=0] found JavaScript
     error: undefined variable e
     info: [element] URL=www.google.com/adsense/search/async-ads.js
     info: [1] no JavaScript
     file: 49e51d7e1f8c3689f7d16a851b3ed8f53b8ae2ee: 102266 bytes
     file: 738f7952a0d1234aa7e8d7ed1539cbfdd6db88ce: 110 bytes

Decoded Files
49e5/1d7e1f8c3689f7d16a851b3ed8f53b8ae2ee from www.ask.com/web?q=puppies (102266 bytes, 25796 hidden) download