JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 90d0fc2ae2d0ca8675a2315674e4ecb9129368d2 (Received 2013-01-18 19:54:51, http://idsecurex.com/?j=IGQXIiit&lp=25&s=102e49fc437e67bf378dff179327aa )

URLStatus
idsecurex.com/?j=IGQXIiit&lp=25&s=102e49fc437e67bf378dff179327aa saved 125 bytes 724f1d2cf8ecb05a683422f220a1b78610097df9

www.arcadesafari.com/packed/ status: (referer=www.arcadesafari.com/packed/a5fcbac9-2be384c3.js)

www.arcadesafari.com/packed/pngfix.js status: (referer=www.arcadesafari.com/packed/ef6f2551-2be384c3.js)

www.arcadesafari.com/xml/feeds/specialgamefeed.xml status: (referer=www.arcadesafari.com/aj/770/6143/116330/OhRbKOPmxWDl3fywFTuiTq029zafD4Ni)

www.arcadesafari.com/assets/dcfb5f32/undefined status: (referer=www.arcadesafari.com/assets/dcfb5f32/clientscripts.php?js=prado,effects,ajax)

www.arcadesafari.com/packed/myMovie.swf status: (referer=www.arcadesafari.com/packed/bce42775-65b98363.js)

b1.arcadesafari.com/aj/b.php?siteID=11&size=728x90&tag=old16 status: (referer=www.arcadesafari.com/aj/770/6143/116330/OhRbKOPmxWDl3fywFTuiTq029zafD4Ni)

www.arcadesafari.com/packed/swfformfix.js status: (referer=www.arcadesafari.com/packed/bce42775-65b98363.js)

s7.addthis.com/js/300/undefined status: (referer=s7.addthis.com/js/300/widget.js#pub=ra-50868e653768ee77&async=1&domready=1)

data.resultlinks.com/javascript/loader.php?gid=10248 status: (referer=www.arcadesafari.com/aj/770/6143/116330/OhRbKOPmxWDl3fywFTuiTq029zafD4Ni)

this.content.served.by.adshuffle.com/p/kl/46/799/r/12/4/8/t/3847/rmktg/track.html status: (referer=www.arcadesafari.com/aj/770/6143/116330/OhRbKOPmxWDl3fywFTuiTq029zafD4Ni)

ad.trafficmp.com/a/bpix?adv=1717&id=2&format=javascript&r= status: (referer=www.arcadesafari.com/aj/770/6143/116330/OhRbKOPmxWDl3fywFTuiTq029zafD4Ni)failure: <urlopen error [Errno -2] Name or service not known>

Warning: reading file /storagefiles/5ef7//7affaa7aa2338892194112200a6d62bfd65e failed
Warning: reading file /storagefiles/4e0f//40e6921449725627fa2500ef6429a1813586 failed
Warning: reading file /storagefiles/e372//cb875a852b29fe2c6b95b5a833b4f4243356 failed
Warning: reading file /storagefiles/3a0d//6b490dd74f930e40543c225eb4055bfbb0a7 failed
Warning: reading file /storagefiles/334b//83a50a70a707b0aa0dd1f50148cd7993a02d failed
Warning: reading file /storagefiles/2019//7dca5c8e6916318df6b9c00f1a9f7a2dba66 failed
Warning: reading file /storagefiles/09c8//3c2350cd738fbc57eeb7c988ec3d7cda431b failed
Warning: reading file /storagefiles/5812//9a545435ecb1d17c5beb648aeb709859e396 failed
Warning: reading file /storagefiles/6065//eae38b3c1a6a535ad5527aeb800c86202cdd failed

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
idsecurex.com/?j=IGQXIiit&lp=25&s=102e49fc437e67bf378dff179327aa benign
[nothing detected] idsecurex.com/?j=IGQXIiit&lp=25&s=102e49fc437e67bf378dff179327aa
     status: (referer=http:/www.ask.com/web?q=puppies)saved 125 bytes 724f1d2cf8ecb05a683422f220a1b78610097df9
     info: [meta refresh] URL=www.arcadesafari.com/aj/770/6143/116330/OhRbKOPmxWDl3fywFTuiTq029zafD4Ni
     info: [0] no JavaScript
     file: 724f1d2cf8ecb05a683422f220a1b78610097df9: 125 bytes

Decoded Files
724f/1d2cf8ecb05a683422f220a1b78610097df9 from idsecurex.com/?j=IGQXIiit&lp=25&s=102e49fc437e67bf378dff179327aa (125 bytes) download


www.arcadesafari.com/aj/770/6143/116330/OhRbKOPmxWDl3fywFTuiTq029zafD4Ni benign
[nothing detected] (metarefresh) www.arcadesafari.com/aj/770/6143/116330/OhRbKOPmxWDl3fywFTuiTq029zafD4Ni
     status: (referer=idsecurex.com/?j=IGQXIiit&lp=25&s=102e49fc437e67bf378dff179327aa)saved 55991 bytes d08cae1b30e18cd04c8c047b34e0697cf0c9d422
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [script] www.arcadesafari.com/packed/ef6f2551-2be384c3.js
     info: [script] www.arcadesafari.com/js/jquery-1.8.2.min.js
     info: [script] www.arcadesafari.com/packed/bce42775-65b98363.js
     info: [script] data.resultlinks.com/javascript/loader.php?gid=10248
     info: [script] www.arcadesafari.com/assets/dcfb5f32/clientscripts.php?js=prado,effects,ajax
     info: [img] www.arcadesafari.com/images/arrow.png
     info: [img] static.fgc.facdn.com/content/files/0/0/488/image/0000000488_i1.jpg
     info: [img] static.fgc.facdn.com/content/files/0/0/109/image/0000000109_i1.jpg
     info: [img] static.fgc.facdn.com/content/files/0/0/577/image/0000000577_i1.jpg
     info: [img] www.arcadesafari.com/images/playnow.png
     info: [img] www.arcadesafari.com/images/advertisement.png
     info: [script] s7.addthis.com/js/300/widget.js#pub=ra-50868e653768ee77&async=1&domready=1
     info: [img] static.fgc.facdn.com/content/files/1/7/390/image/0000017390_i1.jpg
     info: [iframe] b1.arcadesafari.com/aj/b.php?siteID=11&size=728x90&tag=old16
     info: [input] www.arcadesafari.com/images/button.png
     info: [img] www.arcadesafari.com/aj/770/6143/116330/
     info: [img] www.arcadesafari.com/images/slider-play-now.png
     info: [img] static.fgc.facdn.com/content/files/1/7/389/image/0000017389_i1.jpg
     info: [img] static.fgc.facdn.com/content/files/1/7/379/image/0000017379_i1.jpg
     info: [img] static.fgc.facdn.com/content/files/1/5/460/image/0000015460_i1.jpg
     info: [img] static.fgc.facdn.com/content/files/1/7/388/image/0000017388_i1.jpg
     info: [img] static.fgc.facdn.com/content/files/1/7/387/image/0000017387_i1.jpg
     info: [img] static.fgc.facdn.com/content/files/1/7/383/image/0000017383_i1.jpg
     info: [img] static.fgc.facdn.com/content/files/1/7/382/image/0000017382_i1.jpg
     info: [img] static.fgc.facdn.com/content/files/1/7/378/image/0000017378_i1.jpg
     info: [img] static.fgc.facdn.com/content/files/1/7/366/image/0000017366_i1.jpg
     info: [img] games.mochiads.com/c/g/abstract-v193321/_100x100.png
     info: [img] games.mochiads.com/c/g/paintworld/_100x100.png
     info: [img] games.mochiads.com/c/g/sanddrops/_100x100.png
     info: [img] thumbs.mochiads.com/c/g/v1/_100x100.png
     info: [img] www.arcadesafari.com/images/banner-jewel-quest.png
     info: [img] www.arcadesafari.com/images/banner-farmerama.png
     info: [img] assets.blaze.com/images/games/infectedthetwinvaccinece/EN/infectedthetwinvaccinece320x240.jpg
     info: [img] www.arcadesafari.com/images/bg.png
     info: [img] static.fgc.facdn.com/content/files/0/0/597/image/0000000597_i1.jpg
     info: [img] static.fgc.facdn.com/content/files/0/0/845/image/0000000845_i1.jpg
     info: [img] static.fgc.facdn.com/content/files/0/0/099/image/0000000099_i1.jpg
     info: [img] static.fgc.facdn.com/content/files/0/0/883/image/0000000883_i1.jpg
     info: [img] static.fgc.facdn.com/content/files/0/1/289/image/0000001289_i1.jpg
     info: [img] static.fgc.facdn.com/content/files/0/3/960/image/0000003960_i1.jpg
     info: [img] static.fgc.facdn.com/content/files/0/2/700/image/0000002700_i1.jpg
     info: [img] static.fgc.facdn.com/content/files/0/1/086/image/0000001086_i1.jpg
     info: [img] static.fgc.facdn.com/content/files/0/3/973/image/0000003973_i1.jpg
     info: [img] static.fgc.facdn.com/content/files/0/3/961/image/0000003961_i1.jpg
     info: [img] static.fgc.facdn.com/content/files/0/1/738/image/0000001738_i1.jpg
     info: [img] static.fgc.facdn.com/content/files/0/3/910/image/0000003910_i1.jpg
     info: [img] static.fgc.facdn.com/content/files/1/7/389/screenshot/0000017389_s1.jpg
     info: [img] static.fgc.facdn.com/content/files/1/5/460/screenshot/0000015460_s1.jpg
     info: [img] static.fgc.facdn.com/content/files/1/7/379/screenshot/0000017379_s1.jpg
     info: [img] www.arcadesafari.com/images/balon.png
     info: [script] www.arcadesafari.com/packed/a5fcbac9-2be384c3.js
     info: [img] leadback.advertising.com/adcedge/lb?site=695501&srvc=1&betr=cs=1&betq=12054=428170
     info: [img] media.fastclick.net/w/tre?id=23726;evt=16559;cat1=20234;cat2=20235;rand=55576991
     info: [img] ads.bluelithium.com/pixel?id=979863&t=2
     info: [script] ad.trafficmp.com/a/bpix?adv=1717&id=2&format=javascript&r=
     info: [iframe] this.content.served.by.adshuffle.com/p/kl/46/799/r/12/4/8/t/3847/rmktg/track.html
     info: [decodingLevel=0] found JavaScript
     error: undefined variable xmlDoc
     info: DecodedMsg detected /info.ActiveXObject Microsoft.XMLHTTP
     info: [open] URL=www.arcadesafari.com/xml/feeds/specialgamefeed.xml
     info: [1] no JavaScript
     file: d08cae1b30e18cd04c8c047b34e0697cf0c9d422: 55991 bytes
     file: 5481ff6a46bb2f717c2ee99228e4a0c854f48487: 94 bytes

Decoded Files
d08c/ae1b30e18cd04c8c047b34e0697cf0c9d422 from www.arcadesafari.com/aj/770/6143/116330/OhRbKOPmxWDl3fywFTuiTq029zafD4Ni (55991 bytes, 13590 hidden) download

5481/ff6a46bb2f717c2ee99228e4a0c854f48487 from www.arcadesafari.com/aj/770/6143/116330/OhRbKOPmxWDl3fywFTuiTq029zafD4Ni (94 bytes) download


www.arcadesafari.com/js/jquery-1.8.2.min.js benign
[nothing detected] (script) www.arcadesafari.com/js/jquery-1.8.2.min.js
     status: (referer=www.arcadesafari.com/aj/770/6143/116330/OhRbKOPmxWDl3fywFTuiTq029zafD4Ni)saved 93436 bytes 149b5180cb9de3f646fc26802440a6ac6e758d40
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     file: 149b5180cb9de3f646fc26802440a6ac6e758d40: 93436 bytes

Decoded Files
149b/5180cb9de3f646fc26802440a6ac6e758d40 from www.arcadesafari.com/js/jquery-1.8.2.min.js (93436 bytes, 6 hidden) download


www.arcadesafari.com/packed/bce42775-65b98363.js benign
[nothing detected] (script) www.arcadesafari.com/packed/bce42775-65b98363.js
     status: (referer=www.arcadesafari.com/aj/770/6143/116330/OhRbKOPmxWDl3fywFTuiTq029zafD4Ni)saved 38601 bytes 2a40cbd4a870a9e8cf4e947243bfbfa6f87f3ae8
     info: [embed] www.arcadesafari.com/packed/
     info: [script] www.arcadesafari.com/packed/swfformfix.js
     info: [embed] www.arcadesafari.com/packed/myMovie.swf
     info: [img] www.arcadesafari.com/packed/images/closelabel.gif
     info: [decodingLevel=0] found JavaScript
     suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
     file: 2a40cbd4a870a9e8cf4e947243bfbfa6f87f3ae8: 38601 bytes
     file: 5ef77affaa7aa2338892194112200a6d62bfd65e: 16731 bytes
     file: 4e0f40e6921449725627fa2500ef6429a1813586: 16468 bytes
     file: e372cb875a852b29fe2c6b95b5a833b4f4243356: 16592 bytes
     file: 3a0d6b490dd74f930e40543c225eb4055bfbb0a7: 38851 bytes
     file: 334b83a50a70a707b0aa0dd1f50148cd7993a02d: 38857 bytes
     file: 20197dca5c8e6916318df6b9c00f1a9f7a2dba66: 39066 bytes
     file: 09c83c2350cd738fbc57eeb7c988ec3d7cda431b: 39258 bytes
     file: 58129a545435ecb1d17c5beb648aeb709859e396: 38972 bytes
     file: 6065eae38b3c1a6a535ad5527aeb800c86202cdd: 39096 bytes

Decoded Files
2a40/cbd4a870a9e8cf4e947243bfbfa6f87f3ae8 from www.arcadesafari.com/packed/bce42775-65b98363.js (38601 bytes, 4287 hidden) download

5ef7/7affaa7aa2338892194112200a6d62bfd65e from www.arcadesafari.com/packed/bce42775-65b98363.js 4e0f/40e6921449725627fa2500ef6429a1813586 from www.arcadesafari.com/packed/bce42775-65b98363.js e372/cb875a852b29fe2c6b95b5a833b4f4243356 from www.arcadesafari.com/packed/bce42775-65b98363.js 3a0d/6b490dd74f930e40543c225eb4055bfbb0a7 from www.arcadesafari.com/packed/bce42775-65b98363.js 334b/83a50a70a707b0aa0dd1f50148cd7993a02d from www.arcadesafari.com/packed/bce42775-65b98363.js 2019/7dca5c8e6916318df6b9c00f1a9f7a2dba66 from www.arcadesafari.com/packed/bce42775-65b98363.js 09c8/3c2350cd738fbc57eeb7c988ec3d7cda431b from www.arcadesafari.com/packed/bce42775-65b98363.js 5812/9a545435ecb1d17c5beb648aeb709859e396 from www.arcadesafari.com/packed/bce42775-65b98363.js 6065/eae38b3c1a6a535ad5527aeb800c86202cdd from www.arcadesafari.com/packed/bce42775-65b98363.js

www.arcadesafari.com/packed/ef6f2551-2be384c3.js benign
[nothing detected] (script) www.arcadesafari.com/packed/ef6f2551-2be384c3.js
     status: (referer=www.arcadesafari.com/aj/770/6143/116330/OhRbKOPmxWDl3fywFTuiTq029zafD4Ni)saved 1606 bytes 2f25ee7ab63ca53855ad79944867bce23520f2f3
     info: [script] www.arcadesafari.com/packed/pngfix.js
     info: [decodingLevel=0] found JavaScript
     file: 2f25ee7ab63ca53855ad79944867bce23520f2f3: 1606 bytes

Decoded Files
2f25/ee7ab63ca53855ad79944867bce23520f2f3 from www.arcadesafari.com/packed/ef6f2551-2be384c3.js (1606 bytes, 206 hidden) download


www.arcadesafari.com/assets/dcfb5f32/clientscripts.php?js=prado,effects,ajax benign
[nothing detected] (script) www.arcadesafari.com/assets/dcfb5f32/clientscripts.php?js=prado,effects,ajax
     status: (referer=www.arcadesafari.com/aj/770/6143/116330/OhRbKOPmxWDl3fywFTuiTq029zafD4Ni)saved 233683 bytes 3c801e8116b9b452920208f698b4e65820c9f70d
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [decodingLevel=0] found JavaScript
     error: undefined function el.getAttribute
     error: undefined variable el
     info: Decoding option navigator.systemLanguage=en and navigator.systemLanguage=zh-cn and browser=IE7/XP and browser=IE8/Vista and browser=Opera and browser=Firefox,      0 bytes
     info: Decoding option navigator.systemLanguage=en and navigator.systemLanguage=zh-cn and browser=IE7/XP and browser=IE8/Vista and browser=Opera and browser=Firefox,      744 bytes
     info: [element] URL=www.arcadesafari.com/assets/dcfb5f32/undefined
     info: [1] no JavaScript
     file: 3c801e8116b9b452920208f698b4e65820c9f70d: 233683 bytes
     file: 29b04a37a9aac2b713454fe6dd7c99876d7c7d1f: 744 bytes

Decoded Files
3c80/1e8116b9b452920208f698b4e65820c9f70d from www.arcadesafari.com/assets/dcfb5f32/clientscripts.php?js=prado,effects,ajax (233683 bytes) download

29b0/4a37a9aac2b713454fe6dd7c99876d7c7d1f from www.arcadesafari.com/assets/dcfb5f32/clientscripts.php?js=prado,effects,ajax (744 bytes) download


www.arcadesafari.com/packed/a5fcbac9-2be384c3.js benign
[nothing detected] (script) www.arcadesafari.com/packed/a5fcbac9-2be384c3.js
     status: (referer=www.arcadesafari.com/aj/770/6143/116330/OhRbKOPmxWDl3fywFTuiTq029zafD4Ni)saved 8205 bytes 22850a4b72bf5884c652aa66d1489c22b6ad88ef
     info: [iframe] www.arcadesafari.com/packed/
     info: [input] www.arcadesafari.com/images/closeDownloadPopup.png
     info: [img] aa.gv.facdn.com/ac/images/loading.gif
     info: [decodingLevel=0] found JavaScript
     error: undefined variable Event
     error: undefined function Event.observe
     file: 22850a4b72bf5884c652aa66d1489c22b6ad88ef: 8205 bytes

Decoded Files
2285/0a4b72bf5884c652aa66d1489c22b6ad88ef from www.arcadesafari.com/packed/a5fcbac9-2be384c3.js (8205 bytes, 462 hidden) download


s7.addthis.com/js/300/widget.js#pub=ra-50868e653768ee77&async=1&domready=1 benign
[nothing detected] (script) s7.addthis.com/js/300/widget.js#pub=ra-50868e653768ee77&async=1&domready=1
     status: (referer=www.arcadesafari.com/aj/770/6143/116330/OhRbKOPmxWDl3fywFTuiTq029zafD4Ni)saved 6800 bytes cd1b876607fdccb519119529b4b22a879dd50628
     info: [decodingLevel=0] found JavaScript
     error: undefined variable a.style
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var a.style = 1;
          error: line:1: ....^
     info: [element] URL=s7.addthis.com/js/300/undefined
     info: [1] no JavaScript
     file: cd1b876607fdccb519119529b4b22a879dd50628: 6800 bytes
     file: 6157b99bc0aa17d9cab999b976d0a2695b4f41cc: 75 bytes

Decoded Files
cd1b/876607fdccb519119529b4b22a879dd50628 from s7.addthis.com/js/300/widget.js#pub=ra-50868e653768ee77&async=1&domready=1 (6800 bytes) download

6157/b99bc0aa17d9cab999b976d0a2695b4f41cc from s7.addthis.com/js/300/widget.js#pub=ra-50868e653768ee77&async=1&domready=1 (75 bytes) download