JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 98007d8a8f7fdfbb0e6b276e8d8035a353a3114a (Received 2012-09-14 23:33:18, http://cluster.adultadworld.com/includes/adultadworldpop_z.js )

URLStatus
cluster.adultadworld.com/includes/z.js saved 5411 bytes 56ae2cab63675c3e9e556da54b511965f7f20e80

All Malicious or Suspicious Elements of Submission

None
newt7.adultadworld.com/jsc/z5/ff2.html?n=607; benign
[nothing detected] (var newurl) newt7.adultadworld.com/jsc/z5/ff2.html?n=607;
     status: (referer=cluster.adultadworld.com/includes/z.js)saved 2871 bytes 185d7f2768f543841bad3028022ff214f6eff8a8
     info: [script] newt7.adultadworld.com/bar/v16-605/z5/jsc/gl.js
     info: [script] newt1.adultadworld.com/bar/v16-605/z5/jsc/iframe2.js
     info: [iframe] hippo.adultadworld.com/ads3/a?
     info: [decodingLevel=0] found JavaScript
     error: undefined variable Image
     error: line:5: TypeError: Image is not a constructor
     file: 185d7f2768f543841bad3028022ff214f6eff8a8: 2871 bytes

Decoded Files
185d/7f2768f543841bad3028022ff214f6eff8a8 from newt7.adultadworld.com/jsc/z5/ff2.html?n=607; (2871 bytes) download


newt1.adultadworld.com/bar/v16-605/z5/jsc/iframe2.js benign
[nothing detected] (script) newt1.adultadworld.com/bar/v16-605/z5/jsc/iframe2.js
     status: (referer=newt7.adultadworld.com/jsc/z5/ff2.html?n=607;)saved 19824 bytes 0b3008abbd05fd9d2590ef6b266b28cdb2344519
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [javascript variable] URL=hippo.adultadworld.com/ads5/
     info: [javascript variable] URL=newt1.adultadworld.com/ads6/
     info: [javascript variable] URL=newt7.adultadworld.com/ads6/
     info: [decodingLevel=0] found JavaScript
     error: undefined variable Image
     error: line:4: TypeError: Image is not a constructor
     file: 0b3008abbd05fd9d2590ef6b266b28cdb2344519: 19824 bytes

Decoded Files
0b30/08abbd05fd9d2590ef6b266b28cdb2344519 from newt1.adultadworld.com/bar/v16-605/z5/jsc/iframe2.js (19824 bytes) download


cluster.adultadworld.com/includes/z.js benign
[nothing detected] cluster.adultadworld.com/includes/z.js
     status: (referer=http:/www.ask.com/web?q=puppies)saved 5411 bytes 56ae2cab63675c3e9e556da54b511965f7f20e80
     info: [decodingLevel=0] found JavaScript
     error: undefined variable location.search
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var location.search = 1;
          error: line:1: ....^
     info: [javascript variable] URL=newt7.adultadworld.com/jsc/z5/ff2.html?n=607;
     info: [var urlpage] URL=newt7.adultadworld.com/jsc/z5/ff2.html?n=607;
     info: [var newurl] URL=newt7.adultadworld.com/jsc/z5/ff2.html?n=607;
     info: [decodingLevel=1] found JavaScript
     info: [decodingLevel=2] found JavaScript
     file: 56ae2cab63675c3e9e556da54b511965f7f20e80: 5411 bytes
     file: 9ec9121a090dcf514b83ba28462c8c68c3ca2245: 10504 bytes
     file: 3bc27c983c2e7d7250e1e1e88ccc0fcfd5a990a4: 165 bytes

Decoded Files
56ae/2cab63675c3e9e556da54b511965f7f20e80 from cluster.adultadworld.com/includes/z.js (5411 bytes, 4 hidden) download

9ec9/121a090dcf514b83ba28462c8c68c3ca2245 from cluster.adultadworld.com/includes/z.js (10504 bytes) download

3bc2/7c983c2e7d7250e1e1e88ccc0fcfd5a990a4 from cluster.adultadworld.com/includes/z.js (165 bytes) download


hippo.adultadworld.com/ads3/a? benign
[nothing detected] (iframe) hippo.adultadworld.com/ads3/a?
     status: (referer=newt7.adultadworld.com/jsc/z5/ff2.html?n=607;)saved 308 bytes 7e22cf30add40a0f607289c3119eef637a0ac920
     info: [img] click.zxxds.net/OzoDB/0/0/0/blank.gif
     info: [0] no JavaScript
     file: 7e22cf30add40a0f607289c3119eef637a0ac920: 308 bytes

Decoded Files
7e22/cf30add40a0f607289c3119eef637a0ac920 from hippo.adultadworld.com/ads3/a? (308 bytes) download


newt7.adultadworld.com/ads6/ benign
[nothing detected] (jsvar) newt7.adultadworld.com/ads6/
     status: (referer=newt1.adultadworld.com/bar/v16-605/z5/jsc/iframe2.js)saved 42 bytes d5fceb6532643d0d84ffe09c40c481ecdf59e15a
     info: [0] no JavaScript
     file: d5fceb6532643d0d84ffe09c40c481ecdf59e15a: 42 bytes

Decoded Files
d5fc/eb6532643d0d84ffe09c40c481ecdf59e15a from newt7.adultadworld.com/ads6/ (42 bytes, 32 hidden) download


hippo.adultadworld.com/ads5/ benign
[nothing detected] (jsvar) hippo.adultadworld.com/ads5/
     status: (referer=newt1.adultadworld.com/bar/v16-605/z5/jsc/iframe2.js)saved 42 bytes d5fceb6532643d0d84ffe09c40c481ecdf59e15a
     info: [0] no JavaScript
     file: d5fceb6532643d0d84ffe09c40c481ecdf59e15a: 42 bytes

Decoded Files
d5fc/eb6532643d0d84ffe09c40c481ecdf59e15a from hippo.adultadworld.com/ads5/ (42 bytes, 32 hidden) download


newt7.adultadworld.com/bar/v16-605/z5/jsc/gl.js benign
[nothing detected] (script) newt7.adultadworld.com/bar/v16-605/z5/jsc/gl.js
     status: (referer=newt7.adultadworld.com/jsc/z5/ff2.html?n=607;)saved 420 bytes e4b76c279ebbd916beb11c9c7058de69176f8d33
     info: [decodingLevel=0] found JavaScript
     file: e4b76c279ebbd916beb11c9c7058de69176f8d33: 420 bytes

Decoded Files
e4b7/6c279ebbd916beb11c9c7058de69176f8d33 from newt7.adultadworld.com/bar/v16-605/z5/jsc/gl.js (420 bytes, 14 hidden) download


newt1.adultadworld.com/ads6/ benign
[nothing detected] (jsvar) newt1.adultadworld.com/ads6/
     status: (referer=newt1.adultadworld.com/bar/v16-605/z5/jsc/iframe2.js)saved 42 bytes d5fceb6532643d0d84ffe09c40c481ecdf59e15a
     info: [0] no JavaScript
     file: d5fceb6532643d0d84ffe09c40c481ecdf59e15a: 42 bytes

Decoded Files
d5fc/eb6532643d0d84ffe09c40c481ecdf59e15a from newt1.adultadworld.com/ads6/ (42 bytes, 32 hidden) download