JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 98007d8a8f7fdfbb0e6b276e8d8035a353a3114a (Received 2012-09-14 23:33:18, http://cluster.adultadworld.com/includes/adultadworldpop_z.js )

URLStatus
cluster.adultadworld.com/includes/z.js saved 5411 bytes 56ae2cab63675c3e9e556da54b511965f7f20e80

All Malicious or Suspicious Elements of Submission

None
newt7.adultadworld.com/jsc/z5/ff2.html?n=607; benign
[nothing detected] (var newurl) newt7.adultadworld.com/jsc/z5/ff2.html?n=607;
     status: (referer=cluster.adultadworld.com/includes/z.js)saved 2871 bytes 185d7f2768f543841bad3028022ff214f6eff8a8
     info: [script] newt7.adultadworld.com/bar/v16-605/z5/jsc/gl.js
     info: [script] newt1.adultadworld.com/bar/v16-605/z5/jsc/iframe2.js
     info: [iframe] hippo.adultadworld.com/ads3/a?
     info: [decodingLevel=0] found JavaScript
     error: undefined variable Image
     error: line:5: TypeError: Image is not a constructor
     file: 185d7f2768f543841bad3028022ff214f6eff8a8: 2871 bytes

Decoded Files
185d/7f2768f543841bad3028022ff214f6eff8a8 from newt7.adultadworld.com/jsc/z5/ff2.html?n=607; (2871 bytes) download


newt1.adultadworld.com/bar/v16-605/z5/jsc/iframe2.js benign
[nothing detected] (script) newt1.adultadworld.com/bar/v16-605/z5/jsc/iframe2.js
     status: (referer=newt7.adultadworld.com/jsc/z5/ff2.html?n=607;)saved 19824 bytes 0b3008abbd05fd9d2590ef6b266b28cdb2344519
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [javascript variable] URL=hippo.adultadworld.com/ads5/
     info: [javascript variable] URL=newt1.adultadworld.com/ads6/
     info: [javascript variable] URL=newt7.adultadworld.com/ads6/
     info: [decodingLevel=0] found JavaScript
     error: undefined variable Image
     error: line:4: TypeError: Image is not a constructor
     file: 0b3008abbd05fd9d2590ef6b266b28cdb2344519: 19824 bytes

Decoded Files
0b30/08abbd05fd9d2590ef6b266b28cdb2344519 from newt1.adultadworld.com/bar/v16-605/z5/jsc/iframe2.js (19824 bytes) download


cluster.adultadworld.com/includes/z.js benign
[nothing detected] cluster.adultadworld.com/includes/z.js
     status: (referer=http:/www.ask.com/web?q=puppies)saved 5411 bytes 56ae2cab63675c3e9e556da54b511965f7f20e80
     info: [decodingLevel=0] found JavaScript
     error: undefined variable location.search
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var location.search = 1;
          error: line:1: ....^
     info: [javascript variable] URL=newt7.adultadworld.com/jsc/z5/ff2.html?n=607;
     info: [var urlpage] URL=newt7.adultadworld.com/jsc/z5/ff2.html?n=607;
     info: [var newurl] URL=newt7.adultadworld.com/jsc/z5/ff2.html?n=607;
     info: [decodingLevel=1] found JavaScript
     info: [decodingLevel=2] found JavaScript
     file: 56ae2cab63675c3e9e556da54b511965f7f20e80: 5411 bytes
     file: 9ec9121a090dcf514b83ba28462c8c68c3ca2245: 10504 bytes
     file: 3bc27c983c2e7d7250e1e1e88ccc0fcfd5a990a4: 165 bytes

Decoded Files
56ae/2cab63675c3e9e556da54b511965f7f20e80 from cluster.adultadworld.com/includes/z.js (5411 bytes, 4 hidden) download