JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 8ffd45e33d6f26d3c02dde0c260ab7f53f0a4c8f (Received 2018-01-13 08:36:40, http://urlquery.net/report/3afe4fc6-098c-4aa9-9783-30fbe73a89e8 )

URLStatus
urlquery.net/report/3afe4fc6-098c-4aa9-9783-30fbe73a89e8 saved 149503 bytes 4ce705702472ea3a67f0bb6acee37d307fdc4487

urlquery.net/static/org/javascript/javascript:false; status: (referer=urlquery.net/static/org/javascript/jquery-ui-1.9.2.custom.min.js)

urlquery.net/static/org/fancybox/ status: (referer=urlquery.net/static/org/fancybox/jquery.fancybox-1.3.4.pack.js)

pagead2.googlesyndication.com/pagead/js/undefined status: (referer=pagead2.googlesyndication.com/pagead/js/adsbygoogle.js)

adservice.google.com/adsid/integrator.js?domain=undefined status: (referer=pagead2.googlesyndication.com/pagead/js/adsbygoogle.js)

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
cdnjs.cloudflare.com/ajax/libs/js-beautify/1.6.14/beautify-html.js benign
[nothing detected] (script) cdnjs.cloudflare.com/ajax/libs/js-beautify/1.6.14/beautify-html.js
     status: (referer=urlquery.net/report/3afe4fc6-098c-4aa9-9783-30fbe73a89e8)saved 53957 bytes e29e0b6e2c8227fb4ce48d2e5458743468b8a347
     file: e29e0b6e2c8227fb4ce48d2e5458743468b8a347: 53957 bytes

Decoded Files
e29e/0b6e2c8227fb4ce48d2e5458743468b8a347 from cdnjs.cloudflare.com/ajax/libs/js-beautify/1.6.14/beautify-html.js (53957 bytes, 18901 hidden) download


urlquery.net/static/org/fancybox/jquery.fancybox-1.3.4.pack.js benign
[nothing detected] (script) urlquery.net/static/org/fancybox/jquery.fancybox-1.3.4.pack.js
     status: (referer=urlquery.net/report/3afe4fc6-098c-4aa9-9783-30fbe73a89e8)saved 15624 bytes caeb31e930068ce5820b239d44d8415f95957138
     info: [embed] urlquery.net/static/org/fancybox/
     info: [iframe] urlquery.net/static/org/fancybox/
     info: [decodingLevel=0] found JavaScript
     error: undefined variable jQuery
     error: undefined variable Image
     error: line:22: TypeError: Image is not a constructor
     file: caeb31e930068ce5820b239d44d8415f95957138: 15624 bytes

Decoded Files
caeb/31e930068ce5820b239d44d8415f95957138 from urlquery.net/static/org/fancybox/jquery.fancybox-1.3.4.pack.js (15624 bytes) download


www.googletagmanager.com/gtag/js?id=UA-21985291-1 benign
[nothing detected] (script) www.googletagmanager.com/gtag/js?id=UA-21985291-1
     status: (referer=urlquery.net/report/3afe4fc6-098c-4aa9-9783-30fbe73a89e8)saved 60496 bytes c3769ae3ef0027e97685240c5343417c5ff7995e
     file: c3769ae3ef0027e97685240c5343417c5ff7995e: 60496 bytes

Decoded Files
c376/9ae3ef0027e97685240c5343417c5ff7995e from www.googletagmanager.com/gtag/js?id=UA-21985291-1 (60496 bytes, 5 hidden) download


urlquery.net/static/org/prettify/prettify.js benign
[nothing detected] (script) urlquery.net/static/org/prettify/prettify.js
     status: (referer=urlquery.net/report/3afe4fc6-098c-4aa9-9783-30fbe73a89e8)saved 18752 bytes e4b8e2f7b5cd22347480deca5f0d5300e04672a7
     file: e4b8e2f7b5cd22347480deca5f0d5300e04672a7: 18752 bytes

Decoded Files
e4b8/e2f7b5cd22347480deca5f0d5300e04672a7 from urlquery.net/static/org/prettify/prettify.js (18752 bytes, 16 hidden) download


urlquery.net/static/org/javascript/jquery-1.8.3.js benign
[nothing detected] (script) urlquery.net/static/org/javascript/jquery-1.8.3.js
     status: (referer=urlquery.net/report/3afe4fc6-098c-4aa9-9783-30fbe73a89e8)saved 267739 bytes 49a6d1346f3d5a167331a8a5de4f34b5fcc1f6d0
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     file: 49a6d1346f3d5a167331a8a5de4f34b5fcc1f6d0: 267739 bytes

Decoded Files
49a6/d1346f3d5a167331a8a5de4f34b5fcc1f6d0 from urlquery.net/static/org/javascript/jquery-1.8.3.js (267739 bytes, 26452 hidden) download


urlquery.net/report/3afe4fc6-098c-4aa9-9783-30fbe73a89e8 benign
[nothing detected] urlquery.net/report/3afe4fc6-098c-4aa9-9783-30fbe73a89e8
     status: (referer=http:/www.ask.com/web?q=puppies)saved 149503 bytes 4ce705702472ea3a67f0bb6acee37d307fdc4487
     info: [script] urlquery.net/static/org/javascript/jquery-1.8.3.js
     info: [script] urlquery.net/static/org/javascript/jquery-ui-1.9.2.custom.min.js
     info: [script] urlquery.net/static/org/fancybox/jquery.fancybox-1.3.4.pack.js
     info: [script] cdnjs.cloudflare.com/ajax/libs/js-beautify/1.6.14/beautify.js
     info: [script] cdnjs.cloudflare.com/ajax/libs/js-beautify/1.6.14/beautify-html.js
     info: [script] urlquery.net/static/org/prettify/prettify.js
     info: [script] urlquery.net/static/org/javascript/highlight.pack.js
     info: [script] www.googletagmanager.com/gtag/js?id=UA-21985291-1
     info: [img] urlquery.net/screenshot/3afe4fc6-098c-4aa9-9783-30fbe73a89e8
     info: [img] urlquery.net/static/org/images/flags/us.png
     info: [script] pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
     info: [img] urlquery.net/graph/3afe4fc6-098c-4aa9-9783-30fbe73a89e8
     info: [img] urlquery.net/static/org/images/info-alt-128.png
     info: [decodingLevel=0] found JavaScript
     error: undefined variable $
     error: undefined function $
     error: line:4: SyntaxError: missing = in XML attribute:
          error: line:4: <!DOCTYPE html>
          error: line:4: ..............^
     file: 4ce705702472ea3a67f0bb6acee37d307fdc4487: 149503 bytes

Decoded Files
4ce7/05702472ea3a67f0bb6acee37d307fdc4487 from urlquery.net/report/3afe4fc6-098c-4aa9-9783-30fbe73a89e8 (149503 bytes, 45406 hidden) download


cdnjs.cloudflare.com/ajax/libs/js-beautify/1.6.14/beautify.js benign
[nothing detected] (script) cdnjs.cloudflare.com/ajax/libs/js-beautify/1.6.14/beautify.js
     status: (referer=urlquery.net/report/3afe4fc6-098c-4aa9-9783-30fbe73a89e8)saved 116584 bytes e5e8da425e9c6cd0146f3c54f0f0de01509b9c33
     info: [decodingLevel=0] found JavaScript
     file: e5e8da425e9c6cd0146f3c54f0f0de01509b9c33: 116584 bytes

Decoded Files
e5e8/da425e9c6cd0146f3c54f0f0de01509b9c33 from cdnjs.cloudflare.com/ajax/libs/js-beautify/1.6.14/beautify.js (116584 bytes, 41868 hidden) download


urlquery.net/static/org/javascript/highlight.pack.js benign
[nothing detected] (script) urlquery.net/static/org/javascript/highlight.pack.js
     status: (referer=urlquery.net/report/3afe4fc6-098c-4aa9-9783-30fbe73a89e8)saved 9393 bytes 5ee25fac04da99d79b17512c40e809015eb689b1
     file: 5ee25fac04da99d79b17512c40e809015eb689b1: 9393 bytes

Decoded Files
5ee2/5fac04da99d79b17512c40e809015eb689b1 from urlquery.net/static/org/javascript/highlight.pack.js (9393 bytes) download


urlquery.net/static/org/javascript/jquery-ui-1.9.2.custom.min.js benign
[nothing detected] (script) urlquery.net/static/org/javascript/jquery-ui-1.9.2.custom.min.js
     status: (referer=urlquery.net/report/3afe4fc6-098c-4aa9-9783-30fbe73a89e8)saved 237802 bytes d3c0d260b9e84b9ce78ca61bb7c08c873afb07e0
     info: [iframe] urlquery.net/static/org/javascript/javascript:false;
     info: [decodingLevel=0] found JavaScript
     suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
     file: d3c0d260b9e84b9ce78ca61bb7c08c873afb07e0: 237802 bytes
     file: 4446d664ae072c14d34170ed343c5c1ddf0a1b95: 238084 bytes
     file: bcb8b7173df143afa6be8abe201a33a88f668ebc: 238090 bytes
     file: 6cb6df2211abe8d16edf30ed3e99739b1a6f9073: 238299 bytes
     file: 05ede77d7f5eb2309035fb252435c9bc9ab92592: 238491 bytes
     file: 846d6524eb7affa15e5367775dfaa88b5d06cc46: 238205 bytes
     file: 9c13aa507a3a92cce77c1788f13beba74bb35f4f: 238329 bytes

Decoded Files
d3c0/d260b9e84b9ce78ca61bb7c08c873afb07e0 from urlquery.net/static/org/javascript/jquery-ui-1.9.2.custom.min.js (237802 bytes, 6 hidden) download

4446/d664ae072c14d34170ed343c5c1ddf0a1b95 from urlquery.net/static/org/javascript/jquery-ui-1.9.2.custom.min.js (238084 bytes, 6 hidden) download

bcb8/b7173df143afa6be8abe201a33a88f668ebc from urlquery.net/static/org/javascript/jquery-ui-1.9.2.custom.min.js (238090 bytes, 6 hidden) download

6cb6/df2211abe8d16edf30ed3e99739b1a6f9073 from urlquery.net/static/org/javascript/jquery-ui-1.9.2.custom.min.js (238299 bytes, 6 hidden) download

05ed/e77d7f5eb2309035fb252435c9bc9ab92592 from urlquery.net/static/org/javascript/jquery-ui-1.9.2.custom.min.js (238491 bytes, 6 hidden) download

846d/6524eb7affa15e5367775dfaa88b5d06cc46 from urlquery.net/static/org/javascript/jquery-ui-1.9.2.custom.min.js (238205 bytes, 6 hidden) download

9c13/aa507a3a92cce77c1788f13beba74bb35f4f from urlquery.net/static/org/javascript/jquery-ui-1.9.2.custom.min.js (238329 bytes, 6 hidden) download


pagead2.googlesyndication.com/pagead/js/adsbygoogle.js benign
[nothing detected] (script) pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
     status: (referer=urlquery.net/report/3afe4fc6-098c-4aa9-9783-30fbe73a89e8)saved 68353 bytes fb2158af3e9604ae1cdac32b157e0fe8ff7a5c5f
     info: [decodingLevel=0] found JavaScript
     info: [element] URL=pagead2.googlesyndication.com/pagead/js/undefined
     info: [element] URL=adservice.google.com/adsid/integrator.js?domain=undefined
     info: [decodingLevel=1] found JavaScript
     file: fb2158af3e9604ae1cdac32b157e0fe8ff7a5c5f: 68353 bytes
     file: 9f961cadcc007784cad0decc9d4dddd73835a7e3: 297 bytes

Decoded Files
fb21/58af3e9604ae1cdac32b157e0fe8ff7a5c5f from pagead2.googlesyndication.com/pagead/js/adsbygoogle.js (68353 bytes) download

9f96/1cadcc007784cad0decc9d4dddd73835a7e3 from pagead2.googlesyndication.com/pagead/js/adsbygoogle.js (297 bytes, 5 hidden) download