JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 642b6579b3007514b0dc718af946c29ebb5200ef (Received 2013-07-04 15:28:04, http://www.liveinternet.ru/community/vladimir_vysotsky/post79135252/ )

URLStatus
www.liveinternet.ru/community/vysotsky/post79135252/ saved 104251 bytes c8faa20628296d45411d0f7ae1a0e579c030ee47

i.li.ru/ReActive/js/global/lib/protoculous-effects-packer.js status: (referer=www.liveinternet.ru/community/vysotsky/post79135252/)

i.li.ru/ReActive/js/global/global.js status: (referer=www.liveinternet.ru/community/vysotsky/post79135252/)

userapi.com/js/api/openapi.js?31 status: (referer=www.liveinternet.ru/community/vysotsky/post79135252/)

i.li.ru/4Ek/JS/diary/trans.js status: (referer=www.liveinternet.ru/community/vysotsky/post79135252/)

www.liveinternet.ru/jsearch/ status: (referer=www.liveinternet.ru/community/vysotsky/post79135252/)

www.liveinternet.ru/cgi-bin/adv.fcgi?p=3,2,300&qtype=javascript&span-name=span,span,span&age-value=&gender-value= status: (referer=www.liveinternet.ru/community/vysotsky/post79135252/)

i.li.ru/ReActive/js/global/effects.js status: (referer=www.liveinternet.ru/community/vysotsky/post79135252/)

www.liveinternet.ru/cgi-bin/adv.fcgi?p=7&qtype=javascript&span-name=span status: (referer=www.liveinternet.ru/community/vysotsky/post79135252/)

www.facebook.com/plugins/like.php?href= status: (referer=www.liveinternet.ru/ReActive/js/global/li.js)

www.liveinternet.ru/flash/mjupl4li.swf?123 status: (referer=www.liveinternet.ru/community/vysotsky/post79135252/)

i.li.ru/4Ek/JS/diary/pasten.js status: (referer=www.liveinternet.ru/community/vysotsky/post79135252/)

connect.facebook.net/RU/all.js#appId=APP_ID&xfbml=1 status: (referer=www.liveinternet.ru/community/vysotsky/post79135252/)

i.li.ru/jcomment.js status: (referer=www.liveinternet.ru/community/vysotsky/post79135252/)

www.liveinternet.ru/ReActive/static/twitter/ status: (referer=www.liveinternet.ru/ReActive/js/global/li.js)

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
www.liveinternet.ru/community/vysotsky/post79135252/ benign
[nothing detected] www.liveinternet.ru/community/vysotsky/post79135252/
     status: (referer=http:/www.ask.com/web?q=puppies)saved 104251 bytes c8faa20628296d45411d0f7ae1a0e579c030ee47
     info: [javascript variable] URL=www.liveinternet.ru/jsearch/
     info: [script] i.li.ru/ReActive/js/global/global.js
     info: [script] i.li.ru/ReActive/js/global/lib/protoculous-effects-packer.js
     info: [script] i.li.ru/ReActive/js/global/effects.js
     info: [script] i.li.ru/ReActive/js/blog.js
     info: [img] counter.yadro.ru/hit;1380323?r
     info: [img] www.tns-counter.ru/V13a****ru/ru/CP1251/tmsec=blogs/
     info: [script] www.liveinternet.ru/cgi-bin/adv.fcgi?p=7&qtype=javascript&span-name=span
     info: [img] i.li.ru/ReActive/i/profile/crown.png
     info: [script] www.liveinternet.ru/cgi-bin/adv.fcgi?p=3,2,300&qtype=javascript&span-name=span,span,span&age-value=&gender-value=
     info: [embed] www.liveinternet.ru/flash/mjupl4li.swf?123
     info: [img] i.li.ru/ReActive/i/blog/top/srch-btn.png
     info: [img] counter.yadro.ru/logo;1380323?27.1
     info: [script] i.li.ru/jcomment.js
     info: [script] i.li.ru/4Ek/JS/diary/pasten.js
     info: [script] i.li.ru/4Ek/JS/diary/trans.js
     info: [img] i.li.ru/ReActive/i/blog/comm/new/spam.png
     info: [script] i.li.ru/4Ek/JS/diary/main/nav/regoradd.js
     info: [img] i.li.ru/images/m2.gif
     info: [img] img167.imageshack.us/img167/2063/197901moskvametropolyh9.jpg
     info: [img] img167.imageshack.us/img167/1791/aksionovvq4.jpg
     info: [script] www.liveinternet.ru/cgi-bin/adv.fcgi?p=5&qtype=javascript&span-name=span&age-value=&gender-value=
     info: [script] www.liveinternet.ru/spell/spell.js
     info: [script] i.li.ru/vbcode.js
     info: [script] i.li.ru/translit.js
     info: [input] i.li.ru/4Ek/i/diary/butt/grey.gif
     info: [input] i.li.ru/4Ek/i/diary/butt/grey.gif
     info: [script] connect.facebook.net/RU/all.js#appId=APP_ID&xfbml=1
     info: [script] userapi.com/js/api/openapi.js?31
     info: [script] platform.twitter.com/anywhere.js?id=nJxztn1zSdWjEJNdsZWvYQ
     info: [img] counter.yadro.ru/logo;groups/li/?52.1
     info: [script] i.li.ru/ReActive/js/global/lib/lici.js
     info: [script] www.liveinternet.ru/ReActive/js/global/li.js
     info: [decodingLevel=0] found JavaScript
     error: undefined variable Image
     error: line:139: TypeError: Image is not a constructor
     info: [img] counter.yadro.ru/hit;1380323?rundefined;sundefined*undefined*undefined;uundefined;h%C3%8C%C3%A0%C3%B0%C3%AA%20%C3%96%C3%BB%C3%A1%C3%B3%C3%AB%C3%BC%C3%B1%C3%AA%C3%A8%C3%A9.%20%26amp%3Bquot%3B%C3%8A%C3%A0%C3%AA%20%C3%BD%C3%B2%C3%AE%20%C3%A1%C3%BB%C3%AB%C3%AE.%20%C3%87%C3%A0%C3%AF%C3%A8%C3%B1%C3%AA%C3%A8%20;p;0.9382509263836026
     info: [decodingLevel=1] found JavaScript
     file: c8faa20628296d45411d0f7ae1a0e579c030ee47: 104251 bytes
     file: 93e70d973ec4eb23c6e534ae3301f52d9b38cb4d: 401 bytes

Decoded Files
c8fa/a20628296d45411d0f7ae1a0e579c030ee47 from www.liveinternet.ru/community/vysotsky/post79135252/ (104251 bytes, 24592 hidden) download

93e7/0d973ec4eb23c6e534ae3301f52d9b38cb4d from www.liveinternet.ru/community/vysotsky/post79135252/ (401 bytes) download


i.li.ru/vbcode.js benign
[nothing detected] (script) i.li.ru/vbcode.js
     status: (referer=www.liveinternet.ru/community/vysotsky/post79135252/)saved 7938 bytes f281f6c8de3ff4d4d86bd2c6f187df8e0a4359b6
     file: f281f6c8de3ff4d4d86bd2c6f187df8e0a4359b6: 7938 bytes

Decoded Files
f281/f6c8de3ff4d4d86bd2c6f187df8e0a4359b6 from i.li.ru/vbcode.js (7938 bytes, 2068 hidden) download


www.liveinternet.ru/ReActive/js/global/li.js benign
[nothing detected] (script) www.liveinternet.ru/ReActive/js/global/li.js
     status: (referer=www.liveinternet.ru/community/vysotsky/post79135252/)saved 160548 bytes 9f48cf429bd0f2ff333e0e6e0c6b4fe9335ab449
     info: [img] ma.li.ru/
     info: [img] www.liveinternet.ru/ReActive/js/global/
     info: [iframe] www.liveinternet.ru/ReActive/static/twitter/
     info: [iframe] www.facebook.com/plugins/like.php?href=
     file: 9f48cf429bd0f2ff333e0e6e0c6b4fe9335ab449: 160548 bytes

Decoded Files
9f48/cf429bd0f2ff333e0e6e0c6b4fe9335ab449 from www.liveinternet.ru/ReActive/js/global/li.js (160548 bytes, 72269 hidden) download


platform.twitter.com/anywhere.js?id=nJxztn1zSdWjEJNdsZWvYQ benign
[nothing detected] (script) platform.twitter.com/anywhere.js?id=nJxztn1zSdWjEJNdsZWvYQ
     status: (referer=www.liveinternet.ru/community/vysotsky/post79135252/)saved 531 bytes 8b66c94424167faeb6993bc4666ebd166d87d862
     info: [decodingLevel=0] found JavaScript
     suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
     file: 8b66c94424167faeb6993bc4666ebd166d87d862: 531 bytes
     file: 6e7a88c106bc2ce52015556f1d70178e3bf376c3: 801 bytes
     file: 4a76283081771505701a02c87ea1357fb8d7b05e: 807 bytes
     file: a9aa5825f353250a1573cc3c933f1ed9d5214dab: 1016 bytes
     file: a203061ccabfa6234d0e7ac4ee5577cecf9e2556: 1208 bytes
     file: 6583b402cf84594f9f8f3174e4a52885294e9037: 922 bytes
     file: d45de15919dc0bf9ea1297c2d7cf0007507d7952: 1046 bytes

Decoded Files
8b66/c94424167faeb6993bc4666ebd166d87d862 from platform.twitter.com/anywhere.js?id=nJxztn1zSdWjEJNdsZWvYQ (531 bytes, 39 hidden) download

6e7a/88c106bc2ce52015556f1d70178e3bf376c3 from platform.twitter.com/anywhere.js?id=nJxztn1zSdWjEJNdsZWvYQ (801 bytes, 39 hidden) download

4a76/283081771505701a02c87ea1357fb8d7b05e from platform.twitter.com/anywhere.js?id=nJxztn1zSdWjEJNdsZWvYQ (807 bytes, 39 hidden) download

a9aa/5825f353250a1573cc3c933f1ed9d5214dab from platform.twitter.com/anywhere.js?id=nJxztn1zSdWjEJNdsZWvYQ (1016 bytes, 39 hidden) download

a203/061ccabfa6234d0e7ac4ee5577cecf9e2556 from platform.twitter.com/anywhere.js?id=nJxztn1zSdWjEJNdsZWvYQ (1208 bytes, 39 hidden) download

6583/b402cf84594f9f8f3174e4a52885294e9037 from platform.twitter.com/anywhere.js?id=nJxztn1zSdWjEJNdsZWvYQ (922 bytes, 39 hidden) download

d45d/e15919dc0bf9ea1297c2d7cf0007507d7952 from platform.twitter.com/anywhere.js?id=nJxztn1zSdWjEJNdsZWvYQ (1046 bytes, 39 hidden) download


i.li.ru/ReActive/js/blog.js benign
[nothing detected] (script) i.li.ru/ReActive/js/blog.js
     status: (referer=www.liveinternet.ru/community/vysotsky/post79135252/)saved 3386 bytes 17ad1e0a3bf5523338be332e0b68e30de132b339
     info: [decodingLevel=0] found JavaScript
     error: undefined variable screenSize
     error: undefined function screenSize
     file: 17ad1e0a3bf5523338be332e0b68e30de132b339: 3386 bytes

Decoded Files
17ad/1e0a3bf5523338be332e0b68e30de132b339 from i.li.ru/ReActive/js/blog.js (3386 bytes, 665 hidden) download


i.li.ru/4Ek/JS/diary/main/nav/regoradd.js benign
[nothing detected] (script) i.li.ru/4Ek/JS/diary/main/nav/regoradd.js
     status: (referer=www.liveinternet.ru/community/vysotsky/post79135252/)saved 1612 bytes 31b8016916e010c363b388a38f23c7bae3478c26
     info: [decodingLevel=0] found JavaScript
     error: undefined variable auth
     error: undefined variable utype
     error: undefined variable curj
     info: [decodingLevel=1] found JavaScript
     file: 31b8016916e010c363b388a38f23c7bae3478c26: 1612 bytes
     file: 986ca0f0bee21d70674e353878b5ff92a48c3620: 204 bytes

Decoded Files
31b8/016916e010c363b388a38f23c7bae3478c26 from i.li.ru/4Ek/JS/diary/main/nav/regoradd.js (1612 bytes, 363 hidden) download

986c/a0f0bee21d70674e353878b5ff92a48c3620 from i.li.ru/4Ek/JS/diary/main/nav/regoradd.js (204 bytes, 11 hidden) download


www.liveinternet.ru/spell/spell.js benign
[nothing detected] (script) www.liveinternet.ru/spell/spell.js
     status: (referer=www.liveinternet.ru/community/vysotsky/post79135252/)saved 2234 bytes 8369af0459edf0e79271d1e0c1f8ec835028e853
     info: [decodingLevel=0] found JavaScript
     file: 8369af0459edf0e79271d1e0c1f8ec835028e853: 2234 bytes

Decoded Files
8369/af0459edf0e79271d1e0c1f8ec835028e853 from www.liveinternet.ru/spell/spell.js (2234 bytes, 323 hidden) download


www.liveinternet.ru/cgi-bin/adv.fcgi?p=5&qtype=javascript&span-name=span&age-value=&gender-value= benign
[nothing detected] (script) www.liveinternet.ru/cgi-bin/adv.fcgi?p=5&qtype=javascript&span-name=span&age-value=&gender-value=
     status: (referer=www.liveinternet.ru/community/vysotsky/post79135252/)saved 1 bytes b858cb282617fb0956d960215c8e84d1ccf909c6
     info: [0] no JavaScript
     file: b858cb282617fb0956d960215c8e84d1ccf909c6: 1 bytes

Decoded Files
b858/cb282617fb0956d960215c8e84d1ccf909c6 from www.liveinternet.ru/cgi-bin/adv.fcgi?p=5&qtype=javascript&span-name=span&age-value=&gender-value= (1 bytes) download


i.li.ru/translit.js benign
[nothing detected] (script) i.li.ru/translit.js
     status: (referer=www.liveinternet.ru/community/vysotsky/post79135252/)saved 2425 bytes 52576db6a5c05022a1f9aae99558ed58b0619b0b
     info: [decodingLevel=0] found JavaScript
     file: 52576db6a5c05022a1f9aae99558ed58b0619b0b: 2425 bytes

Decoded Files
5257/6db6a5c05022a1f9aae99558ed58b0619b0b from i.li.ru/translit.js (2425 bytes, 536 hidden) download


i.li.ru/ReActive/js/global/lib/lici.js benign
[nothing detected] (script) i.li.ru/ReActive/js/global/lib/lici.js
     status: (referer=www.liveinternet.ru/community/vysotsky/post79135252/)saved 14452 bytes b484daf150e94d92e2d696b5d39244531c64e21e
     info: [decodingLevel=0] found JavaScript
     file: b484daf150e94d92e2d696b5d39244531c64e21e: 14452 bytes

Decoded Files
b484/daf150e94d92e2d696b5d39244531c64e21e from i.li.ru/ReActive/js/global/lib/lici.js (14452 bytes, 2322 hidden) download