JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 58e5402711b66bfbac8bb1413abf43f2bc13509f (Received 2013-01-01 17:18:06, www.checkedproxylists.com/proxylist_full_jan_1_19_32_03.html )

URLStatus
www.checkedproxylists.com/1_19_32_03.html saved 13999 bytes 823db2683a3216063f5f262666a13fa932361732

pagead2.googlesyndication.com/pagead/js/r20121206/r20121214/ status: (referer=pagead2.googlesyndication.com/pagead/js/r20121206/r20121214/impl.js)

Warning: reading file /storagefiles/10bb//8be54b5be7f50f0b4353a69d512cfb933ec3 failed
Warning: reading file /storagefiles/adaa//e844b900d1a27dd2287356ab5d1d7b8c7a96 failed
Warning: reading file /storagefiles/558d//d076a092ec2057fcb05d9ac887f6f10b71bc failed
Warning: reading file /storagefiles/4124//b4511be1f58ae6e8346bb215d0f4d7ddca58 failed
Warning: reading file /storagefiles/bfb5//bee2c788a155163eb2e18a5a7acff0dfd9ce failed
Warning: reading file /storagefiles/d4c8//b05ebe8b4f7b703a0029046dc30b0d328555 failed

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
pagead2.googlesyndication.com/pagead/js/r20121206/r20121214/impl.js benign
[nothing detected] (script) pagead2.googlesyndication.com/pagead/js/r20121206/r20121214/impl.js
     status: (referer=pagead2.googlesyndication.com/pagead/ads.js)saved 57857 bytes c0eeaefd2a824171a5b9fec415c59f538e5f3019
     info: [iframe] pagead2.googlesyndication.com/pagead/js/r20121206/r20121214/
     info: [decodingLevel=0] found JavaScript
     suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
     file: c0eeaefd2a824171a5b9fec415c59f538e5f3019: 57857 bytes
     file: 10bb8be54b5be7f50f0b4353a69d512cfb933ec3: 58163 bytes
     file: adaae844b900d1a27dd2287356ab5d1d7b8c7a96: 58169 bytes
     file: 558dd076a092ec2057fcb05d9ac887f6f10b71bc: 58378 bytes
     file: 4124b4511be1f58ae6e8346bb215d0f4d7ddca58: 58570 bytes
     file: bfb5bee2c788a155163eb2e18a5a7acff0dfd9ce: 58284 bytes
     file: d4c8b05ebe8b4f7b703a0029046dc30b0d328555: 58408 bytes

Decoded Files
c0ee/aefd2a824171a5b9fec415c59f538e5f3019 from pagead2.googlesyndication.com/pagead/js/r20121206/r20121214/impl.js (57857 bytes) download

10bb/8be54b5be7f50f0b4353a69d512cfb933ec3 from pagead2.googlesyndication.com/pagead/js/r20121206/r20121214/impl.js adaa/e844b900d1a27dd2287356ab5d1d7b8c7a96 from pagead2.googlesyndication.com/pagead/js/r20121206/r20121214/impl.js 558d/d076a092ec2057fcb05d9ac887f6f10b71bc from pagead2.googlesyndication.com/pagead/js/r20121206/r20121214/impl.js 4124/b4511be1f58ae6e8346bb215d0f4d7ddca58 from pagead2.googlesyndication.com/pagead/js/r20121206/r20121214/impl.js bfb5/bee2c788a155163eb2e18a5a7acff0dfd9ce from pagead2.googlesyndication.com/pagead/js/r20121206/r20121214/impl.js d4c8/b05ebe8b4f7b703a0029046dc30b0d328555 from pagead2.googlesyndication.com/pagead/js/r20121206/r20121214/impl.js

pagead2.googlesyndication.com/pagead/script.js benign
[nothing detected] (script) pagead2.googlesyndication.com/pagead/script.js
     status: (referer=www.checkedproxylists.com/script.html)saved 463 bytes 91cac78e0b45f6ab6fff184afff7f533210419be
     info: [decodingLevel=0] found JavaScript
     file: 91cac78e0b45f6ab6fff184afff7f533210419be: 463 bytes

Decoded Files
91ca/c78e0b45f6ab6fff184afff7f533210419be from pagead2.googlesyndication.com/pagead/script.js (463 bytes, 66 hidden) download


www.google-analytics.com/ga.js benign
[nothing detected] (element) www.google-analytics.com/ga.js
     status: (referer=www.checkedproxylists.com/1_19_32_03.html)saved 37362 bytes 142a9875c4bd7e15ce6ac8b5bb181fb29ed08ba5
     info: [decodingLevel=0] found JavaScript
     file: 142a9875c4bd7e15ce6ac8b5bb181fb29ed08ba5: 37362 bytes

Decoded Files
142a/9875c4bd7e15ce6ac8b5bb181fb29ed08ba5 from www.google-analytics.com/ga.js (37362 bytes) download


www.checkedproxylists.com/1_19_32_03.html benign
[nothing detected] www.checkedproxylists.com/1_19_32_03.html
     status: (referer=http:/www.ask.com/web?q=puppies)saved 13999 bytes 823db2683a3216063f5f262666a13fa932361732
     info: [script] www.checkedproxylists.com/ajax.js
     info: [img] www.checkedproxylists.com/images/cpllogo.jpg
     info: [img] www.proxysolutions.net/affiliates/accounts/default1/banners/pslogo7292.jpg
     info: [img] www.proxysolutions.net/affiliates/scripts/imp.php?aid=13579&bid=d1ad0c42&chan=lst
     info: [img] www.checkedproxylists.com/images/home.gif
     info: [img] www.checkedproxylists.com/images/fav.gif
     info: [img] www.checkedproxylists.com/images/rss.gif
     info: [script] pagead2.googlesyndication.com/pagead/ads.js
     info: [img] www.xroxy.com/images/88x31.gif
     info: [img] www.proxywiki.org/pub/Support/FAQ/pwbtn.gif
     info: [img] www.freeproxylists.com/images/fplbutton.gif
     info: [img] www.proxz.com/images/button.gif
     info: [img] www.listproxies.com/button.php?u=cpl
     info: [img] www.cgiproxylist.com/cpl.gif
     info: [img] www.checkedproxylists.com/images/lists.gif
     info: [img] www.proxyrss.com/img/button.gif
     info: [img] www.proxysolutions.net/affiliates/accounts/default1/banners/pslogo88.jpg
     info: [img] www.proxysolutions.net/affiliates/scripts/imp.php?aid=13579&bid=16547dfe&chan=btn
     info: [img] counter.search.bg/cgi-bin/c?_id=checked&_z=3&_r=
     info: [decodingLevel=0] found JavaScript
     error: undefined variable s
     info: [element] URL=www.google-analytics.com/ga.js
     info: [var url] URL=www.checkedproxylists.com/script.html
     info: [var newurl] URL=www.checkedproxylists.com/script.html
     info: [img] counter.search.bg/cgi-bin/c?_id=checked&_z=3&_r=undefined&_c=undefined&_j=Y&_t=300&_k=Y&_l=undefined
     info: [decodingLevel=1] found JavaScript
     file: 823db2683a3216063f5f262666a13fa932361732: 13999 bytes
     file: 8c92983a82d47324cd35e821d8ff583aa4610de9: 665 bytes

Decoded Files
823d/b2683a3216063f5f262666a13fa932361732 from www.checkedproxylists.com/1_19_32_03.html (13999 bytes, 21 hidden) download

8c92/983a82d47324cd35e821d8ff583aa4610de9 from www.checkedproxylists.com/1_19_32_03.html (665 bytes) download


pagead2.googlesyndication.com/pagead/ads.js benign
[nothing detected] (script) pagead2.googlesyndication.com/pagead/ads.js
     status: (referer=www.checkedproxylists.com/1_19_32_03.html)saved 13811 bytes 2323607d60aec9d404c814ea3fede882bb255460
     info: [decodingLevel=0] found JavaScript
     error: ./pre.js:79: out of memory
          error: ./post.js:36: out of memory
     info: Decoding option browser=IE8/Vista,      0 bytes
     info: Decoding option navigator.systemLanguage=en and navigator.systemLanguage=zh-cn and browser=IE7/XP,      131 bytes
     info: [script] pagead2.googlesyndication.com/pagead/js/r20121206/r20121214/impl.js
     info: [decodingLevel=1] found JavaScript
     file: 2323607d60aec9d404c814ea3fede882bb255460: 13811 bytes
     file: 3d8807ef8296ac1560ae770bb02475068b598e0d: 131 bytes

Decoded Files
2323/607d60aec9d404c814ea3fede882bb255460 from pagead2.googlesyndication.com/pagead/ads.js (13811 bytes) download

3d88/07ef8296ac1560ae770bb02475068b598e0d from pagead2.googlesyndication.com/pagead/ads.js (131 bytes) download


www.checkedproxylists.com/script.html benign
[nothing detected] (var newurl) www.checkedproxylists.com/script.html
     status: (referer=www.checkedproxylists.com/1_19_32_03.html)saved 475 bytes 98a9995ea543daea5a97c46e078f33d322efed2a
     info: [script] pagead2.googlesyndication.com/pagead/script.js
     info: [decodingLevel=0] found JavaScript
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE html PUBLIC "-/W3C/DTD XHTML 1.0 Transitional/EN"
          error: line:3: ...............^
     file: 98a9995ea543daea5a97c46e078f33d322efed2a: 475 bytes

Decoded Files
98a9/995ea543daea5a97c46e078f33d322efed2a from www.checkedproxylists.com/script.html (475 bytes) download


www.checkedproxylists.com/ajax.js benign
[nothing detected] (script) www.checkedproxylists.com/ajax.js
     status: (referer=www.checkedproxylists.com/1_19_32_03.html)saved 1181 bytes 7cc19c54c9806420e795abdcbfe697201ea783f6
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [decodingLevel=0] found JavaScript
     file: 7cc19c54c9806420e795abdcbfe697201ea783f6: 1181 bytes

Decoded Files
7cc1/9c54c9806420e795abdcbfe697201ea783f6 from www.checkedproxylists.com/ajax.js (1181 bytes, 105 hidden) download