JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 62c6f0ea16031d42798aa5fb31bdd0812fd371e2 (Received 2018-10-12 02:47:23, http://upgraderservices.cf/drupal.js )

URLStatus
upgraderservices.cf/drupal.js saved 3865 bytes cc5746c7d0ace7d7219eb0ca8853ba6a5e9c9d81

All Malicious or Suspicious Elements of Submission

None
upgraderservices.cf/drupal.js benign
[nothing detected] upgraderservices.cf/drupal.js
     status: (referer=http:/www.arema.com/)saved 3865 bytes cc5746c7d0ace7d7219eb0ca8853ba6a5e9c9d81
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [javascript variable] URL=hashtag.contentssl.com/f
     info: [decodingLevel=0] found JavaScript
     info: DecodedMsg detected /info.ActiveXObject Microsoft.XMLHTTP
     info: [open] URL=hashtag.contentssl.com/f/stats.php
     info: [1] no JavaScript
     file: cc5746c7d0ace7d7219eb0ca8853ba6a5e9c9d81: 3865 bytes
     file: c00b8d2462ce03bd134abac23786cbcced52a56f: 105 bytes

Decoded Files
cc57/46c7d0ace7d7219eb0ca8853ba6a5e9c9d81 from upgraderservices.cf/drupal.js (3865 bytes, 937 hidden) download

c00b/8d2462ce03bd134abac23786cbcced52a56f from upgraderservices.cf/drupal.js (105 bytes) download


hashtag.contentssl.com/f benign
[nothing detected] (jsvar) hashtag.contentssl.com/f
     status: (referer=upgraderservices.cf/drupal.js)saved 33 bytes 320f715b64c895362059ccfc0315d2eb65d3ca0b
     info: [0] no JavaScript
     file: 320f715b64c895362059ccfc0315d2eb65d3ca0b: 33 bytes

Decoded Files
320f/715b64c895362059ccfc0315d2eb65d3ca0b from hashtag.contentssl.com/f (33 bytes) download


hashtag.contentssl.com/f/stats.php benign
[nothing detected] (open) hashtag.contentssl.com/f/stats.php
     status: (referer=upgraderservices.cf/drupal.js)saved 13 bytes e43b8a0e67783b11d0513bd84372eab9dc7d4abf
     info: [0] no JavaScript
     file: e43b8a0e67783b11d0513bd84372eab9dc7d4abf: 13 bytes

Decoded Files
e43b/8a0e67783b11d0513bd84372eab9dc7d4abf from hashtag.contentssl.com/f/stats.php (13 bytes) download