JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 5ebb8e2b090fe8501105f3d9120693365d9cc693 (Received 2013-07-03 03:51:08, http://www.fllopen.de/ )

URLStatus
www.fllopen.de/ saved 10929 bytes b996382ebb7727f460189e40a096818ed408cde0

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
www.google-analytics.com/urchin.js benign
[nothing detected] (script) www.google-analytics.com/urchin.js
     status: (referer=www.fllopen.de/)saved 22678 bytes 4b9441626e2173e09601eac91798337f11782583
     info: [javascript variable] URL=www.google-analytics.com/__utm.gif
     info: [decodingLevel=0] found JavaScript
     info: [var _ugifpath2] URL=www.google-analytics.com/__utm.gif
     info: [var newurl] URL=www.google-analytics.com/__utm.gif
     info: [decodingLevel=1] found JavaScript
     file: 4b9441626e2173e09601eac91798337f11782583: 22678 bytes
     file: 81037fe4d1908d1ef58f7e3e7d923078b240e0cb: 146 bytes

Decoded Files
4b94/41626e2173e09601eac91798337f11782583 from www.google-analytics.com/urchin.js (22678 bytes, 191 hidden) download

8103/7fe4d1908d1ef58f7e3e7d923078b240e0cb from www.google-analytics.com/urchin.js (146 bytes) download


www.google-analytics.com/__utm.gif benign
[nothing detected] (var newurl) www.google-analytics.com/__utm.gif
     status: (referer=www.google-analytics.com/urchin.js)saved 35 bytes 0f4e929dd5bb2564f7ab9c76338e04e292a42ace
     info: [0] no JavaScript
     file: 0f4e929dd5bb2564f7ab9c76338e04e292a42ace: 35 bytes

Decoded Files
0f4e/929dd5bb2564f7ab9c76338e04e292a42ace from www.google-analytics.com/__utm.gif (35 bytes, 26 hidden) download


www.fllopen.de/js/undefined benign
[nothing detected] (element) www.fllopen.de/js/undefined
     status: (referer=www.fllopen.de/js/jquery-1.4.2.min.js)saved 3409 bytes 59c4072058416accb2b0c3d3f6947c0e9417aa63
     info: [script] www.fllopen.de/js/general.js
     info: [img] www.hands-on-technology.de/img/blank.gif
     info: [img] www.fllopen.de/img/topimg.jpg
     info: [decodingLevel=0] found JavaScript
     suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
     file: 59c4072058416accb2b0c3d3f6947c0e9417aa63: 3409 bytes
     file: 84761712ba3adedd2d7ccde4cb6742ac042dc4a1: 11961 bytes
     file: 4ea26369da6e93af9599251cfc141a4365225eb8: 12085 bytes
     file: b87c27837d82c4a09e4e76658711f10418983955: 3617 bytes
     file: fd019878e9656d14f49a9ab0abd7813859b284ab: 3623 bytes
     file: f7237fd18f86bda9fa38f3c31e1856c54036bbcd: 3832 bytes
     file: 67f6f58dc2f10a50b264b9125fca91b533ce30c1: 4024 bytes
     file: 02926da785a57a6ffd28649b1966d137f42cd09a: 3738 bytes
     file: fc1a6538f249c8d25ab8629213bc188e5e4f8b50: 3862 bytes

Decoded Files
59c4/072058416accb2b0c3d3f6947c0e9417aa63 from www.fllopen.de/js/undefined (3409 bytes, 504 hidden) download

8476/1712ba3adedd2d7ccde4cb6742ac042dc4a1 from www.fllopen.de/js/undefined (11961 bytes) download

4ea2/6369da6e93af9599251cfc141a4365225eb8 from www.fllopen.de/js/undefined (12085 bytes) download

b87c/27837d82c4a09e4e76658711f10418983955 from www.fllopen.de/js/undefined (3617 bytes, 504 hidden) download

fd01/9878e9656d14f49a9ab0abd7813859b284ab from www.fllopen.de/js/undefined (3623 bytes, 504 hidden) download

f723/7fd18f86bda9fa38f3c31e1856c54036bbcd from www.fllopen.de/js/undefined (3832 bytes, 504 hidden) download

67f6/f58dc2f10a50b264b9125fca91b533ce30c1 from www.fllopen.de/js/undefined (4024 bytes, 504 hidden) download

0292/6da785a57a6ffd28649b1966d137f42cd09a from www.fllopen.de/js/undefined (3738 bytes, 504 hidden) download

fc1a/6538f249c8d25ab8629213bc188e5e4f8b50 from www.fllopen.de/js/undefined (3862 bytes, 504 hidden) download


www.fllopen.de/ benign
[nothing detected] www.fllopen.de/
     status: (referer=http:/www.ask.com/web?q=puppies)saved 10929 bytes b996382ebb7727f460189e40a096818ed408cde0
     info: [script] www.fllopen.de/js/jquery-1.4.2.min.js
     info: [script] www.fllopen.de/js/jquery-ui-1.8.4.custom.min.js
     info: [script] www.fllopen.de/js/general.js
     info: [script] www.fllopen.de/js/visit.js
     info: [script] www.fllopen.de/js/tilebg.js
     info: [img] www.fllopen.de/img/fllopen-logo.jpg
     info: [img] www.fllopen.de/img/blank.gif
     info: [img] www.fllopen.de/cache/img/003/04170_643_-476_0000.jpg
     info: [img] www.fllopen.de/cache/img/003/04082_925_-126_0000.jpg
     info: [img] www.fllopen.de/cache/img/003/03946_688_-476_0000.jpg
     info: [img] www.fllopen.de/cache/img/003/04187_019_-125_-125.jpg
     info: [img] www.fllopen.de/cache/img/003/03676_345_-125_-125.jpg
     info: [img] www.fllopen.de/cache/img/003/03593_336_-125_-125.jpg
     info: [script] www.google-analytics.com/urchin.js
     info: [decodingLevel=0] found JavaScript
     error: undefined function window.location.replace
     error: line:5: SyntaxError: missing = in XML attribute:
          error: line:5: PUBLIC "-/W3C/DTD XHTML 1.0 Strict/EN"
          error: line:5: ....^
     file: b996382ebb7727f460189e40a096818ed408cde0: 10929 bytes

Decoded Files
b996/382ebb7727f460189e40a096818ed408cde0 from www.fllopen.de/ (10929 bytes, 643 hidden) download


www.fllopen.de/js/visit.js benign
[nothing detected] (script) www.fllopen.de/js/visit.js
     status: (referer=www.fllopen.de/)saved 7626 bytes 549e8431e5f13f0780bb68b9b8db971e91065406
     info: [decodingLevel=0] found JavaScript
     error: line:3: SyntaxError: unterminated string literal:
          error: line:3: ;');
          error: line:3: .^
     info: Decoding option navigator.systemLanguage=en and navigator.systemLanguage=zh-cn and browser=IE7/XP and browser=IE8/Vista and browser=Opera and browser=Firefox and browser=Opera and browser=Firefox,      0 bytes
     info: Decoding option navigator.systemLanguage=en and navigator.systemLanguage=zh-cn and browser=IE7/XP and browser=IE8/Vista,      428 bytes
     info: [decodingLevel=1] found JavaScript
     error: line:5: SyntaxError: missing ; before statement:
          error: line:5: If ScriptEngineMajorVersion >= 2 then
          error: line:5: ^
     file: 549e8431e5f13f0780bb68b9b8db971e91065406: 7626 bytes
     file: 1ccb775df622978409d6d5368cd71aed3b0220e2: 428 bytes

Decoded Files
549e/8431e5f13f0780bb68b9b8db971e91065406 from www.fllopen.de/js/visit.js (7626 bytes, 800 hidden) download

1ccb/775df622978409d6d5368cd71aed3b0220e2 from www.fllopen.de/js/visit.js (428 bytes, 6 hidden) download


www.fllopen.de/js/general.js benign
[nothing detected] (script) www.fllopen.de/js/general.js
     status: (referer=www.fllopen.de/)saved 3836 bytes 3389820cf3932a8306018364c106fdb50de4ca3e
     info: [decodingLevel=0] found JavaScript
     error: undefined variable $
     error: undefined function $
     file: 3389820cf3932a8306018364c106fdb50de4ca3e: 3836 bytes

Decoded Files
3389/820cf3932a8306018364c106fdb50de4ca3e from www.fllopen.de/js/general.js (3836 bytes, 261 hidden) download


www.fllopen.de/js/jquery-1.4.2.min.js benign
[nothing detected] (script) www.fllopen.de/js/jquery-1.4.2.min.js
     status: (referer=www.fllopen.de/)saved 72174 bytes 65cbff4e9d95d47a6f31d96ab4ea361c1f538a7b
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [decodingLevel=0] found JavaScript
     error: undefined variable d.style
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var d.style = 1;
          error: line:1: ....^
     info: Decoding option navigator.systemLanguage=en and navigator.systemLanguage=zh-cn and browser=IE7/XP and browser=IE8/Vista and browser=Opera and browser=Firefox,      0 bytes
     info: Decoding option navigator.systemLanguage=en and navigator.systemLanguage=zh-cn and browser=IE7/XP and browser=IE8/Vista and browser=Opera and browser=Firefox,      147 bytes
     info: [element] URL=www.fllopen.de/js/undefined
     info: [1] no JavaScript
     file: 65cbff4e9d95d47a6f31d96ab4ea361c1f538a7b: 72174 bytes
     file: 856970df15bbb0cc248844c465fd3df0588df947: 147 bytes

Decoded Files
65cb/ff4e9d95d47a6f31d96ab4ea361c1f538a7b from www.fllopen.de/js/jquery-1.4.2.min.js (72174 bytes) download

8569/70df15bbb0cc248844c465fd3df0588df947 from www.fllopen.de/js/jquery-1.4.2.min.js (147 bytes) download


www.fllopen.de/js/tilebg.js benign
[nothing detected] (script) www.fllopen.de/js/tilebg.js
     status: (referer=www.fllopen.de/)saved 4102 bytes d173d04ff390835d279a5950ba64cf313993be1b
     info: [decodingLevel=0] found JavaScript
     file: d173d04ff390835d279a5950ba64cf313993be1b: 4102 bytes

Decoded Files
d173/d04ff390835d279a5950ba64cf313993be1b from www.fllopen.de/js/tilebg.js (4102 bytes, 377 hidden) download


www.fllopen.de/js/jquery-ui-1.8.4.custom.min.js benign
[nothing detected] (script) www.fllopen.de/js/jquery-ui-1.8.4.custom.min.js
     status: (referer=www.fllopen.de/)saved 18414 bytes e3b8759376147cd10550db38b22267a76c23b373
     info: [decodingLevel=0] found JavaScript
     error: undefined variable jQuery
     error: undefined variable c.ui
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var c.ui = 1;
          error: line:1: ....^
     file: e3b8759376147cd10550db38b22267a76c23b373: 18414 bytes

Decoded Files
e3b8/759376147cd10550db38b22267a76c23b373 from www.fllopen.de/js/jquery-ui-1.8.4.custom.min.js (18414 bytes, 2 hidden) download