JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link c195bc527eaae79438ed6d84c0d9fef3853bdd8d (Received 2012-08-22 00:04:16, log2.pcap )

URLStatus
www-ig-opensocial.googleusercontent.com/gadgets/js/rpc.js?container=ig&nocache=0&debug=0&c=1&v=364cd2481b83b55e77830a85eb8fa7d6&sv=10 status: (referer=www.google.com/)

igoogle-skins.googleusercontent.com/ig/css?skindx=ix:0&url=skins/classic.xml&aig=1&v2=1&jfk=2&fp=IQK60_aTXlk&hl=en&gl=us status: (referer=www.google.com/)

www.google-analytics.com/__utm.gif status: (referer=0bps664l3vqk05dj8qih0t5renri9iic-a-ig-opensocial.googleusercontent.com/gadgets/ifr?js=1&js=1&url=http:/www.gstatic.com/ig/modules/youtube/v3/youtube.xml&container=ig&view=home&lang=en&country=US&sanitize=0&v=f8c17081d1560522&parent=http:/)

server.iad.liveperson.net/hc/48343607/?visitor=&msessionkey=&site=48343607&cmd=knockPage&page=http:/www.expresscorp.com/Category/UID-IUID-Labels?gclid=CKSH_9Cg-rECFdNxMX4AdA&visitorStatus=INSITE_STATUS&activePlugin=none&pageWindowName=&javaSupport=tr status: (referer=http:/twitter.com/trends/)

csi.gstatic.com/csi?v=3&s=opensocial-gadgets&action=home&it=.8,.228&gadget=http%3A%2F%2Fwww.gstatic.com%2Fig%2Fmodules%2Fyoutube%2Fv3%2Fyoutube.xml&container=ig&view=home&e=&rt=dl.450,ol.661,prt.661

csi.gstatic.com/csi?v=3&s=opensocial-gadgets&action=home&it=.315,.1662&gadget=http%3A%2F%2Fwww.gstatic.com%2Fig%2Fmodules%2Fyoutube%2Fv3%2Fyoutube.xml&container=ig&view=home&e=&rt=dl.243,ol.541,prt.541

www.w3.org/1999/xhtml status: (referer=0bps664l3vqk05dj8qih0t5renri9iic-a-ig-opensocial.googleusercontent.com/gadgets/ifr?js=1&js=1&url=http:/www.gstatic.com/ig/modules/youtube/v3/youtube.xml&container=ig&view=home&lang=en&country=US&sanitize=0&v=f8c17081d1560522&parent=http:/)

auth.weather.com/ursa/xml/desktop/installId/?prod=12&rand= status: (referer=www-ig-opensocial.googleusercontent.com/gadgets/ifr?js=1&js=1&url=http:/gadgets.weather.com/services/gadgets/googlegadget/gadget.xml&container=ig&view=default&lang=en&country=US&sanitize=0&v=5eef7f0c4394a1b1&parent=http:/www.google.com&libs=core:core.io:core.iglegacy:auth-refresh&signedin=1&synd=ig&mid=32)

www-ig-opensocial.googleusercontent.com/gadgets/js/auth-refresh:core:core.iglegacy:core.io.js?container=ig&nocache=0&debug=0&c=0&v=8d34f01ddbdcead85b6c9e4cac18f6f3&sv=10&jsload=0 status: (referer=0bps664l3vqk05dj8qih0t5renri9iic-a-ig-opensocial.googleusercontent.com/gadgets/ifr?js=1&js=1&url=http:/www.gstatic.com/ig/modules/youtube/v3/youtube.xml&container=ig&view=home&lang=en&country=US&sanitize=0&v=f8c17081d1560522&parent=http:/www.google.com&libs=core:core.io:core.iglegacy:auth-refresh&signedin=1&synd=ig&mid=1)

0bps664l3vqk05dj8qih0t5renri9iic-a-ig-opensocial.googleusercontent.com/gadgets/makeRequest?refresh=3600&url=http:/gdata.youtube.com/feeds/api/standardfeeds/US/featured?alt=json-in-script&max-results=5&start-index=1&format=5&httpMethod=GET&header

csi.gstatic.com/csi?v=3&s=opensocial-gadgets&action=default&it=.212,.105&gadget=http:/gadgets.weather.com/services/gadgets/googlegadget/gadget.xml&container=ig&view=default&e=&rt=dl.136,ol.4378,prt.4378 status: (referer=http:/twitter.com/trends/)

csi.gstatic.com/csi?v=3&s=opensocial-gadgets&action=default&it=.212,.105&gadget=http%3A%2F%2Fgadgets.weather.com%2Fservices%2Fgadgets%2Fgooglegadget%2Fgadget.xml&container=ig&view=default&e=&rt=dl.136,ol.4378,prt.4378

csi.gstatic.com/csi?v=3&s=opensocial-gadgets&action=default&it=.74,.50&gadget=http%3A%2F%2Fgadgets.weather.com%2Fservices%2Fgadgets%2Fgooglegadget%2Fgadget.xml&container=ig&view=default&e=&rt=dl.49,ol.363,prt.363

upload

csi.gstatic.com/csi?v=3&s=opensocial-gadgets&action=default&it=.74,.50&gadget=http:/gadgets.weather.com/services/gadgets/googlegadget/gadget.xml&container=ig&view=default&e=&rt=dl.49,ol.363,prt.363 status: (referer=http:/twitter.com/trends/)

Warning: reading file /storagefiles/2a66//e6c618db4db764634c272fdf176be172b68a failed
Warning: reading file /storagefiles/55ff//edc959b6a1e7a41c9d617165493d4ea8fc3b failed

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
www-ig-opensocial.googleusercontent.com/gadgets/ifr?js=1&js=1&url=http:/gadgets.weather.com/services/gadgets/googlegadget/gadget.xml&container=ig&view=default&lang=en&country=US&sanitize=0&v=5eef7f0c4394a1b1&parent=http:/www.google.com benign
[nothing detected] GET www-ig-opensocial.googleusercontent.com/gadgets/ifr?js=1&js=1&url=http:/gadgets.weather.com/services/gadgets/googlegadget/gadget.xml&container=ig&view=default&lang=en&country=US&sanitize=0&v=5eef7f0c4394a1b1&parent=http:/www.google.com&libs=core:core.io:core.iglegacy:auth-refresh&signedin=1&synd=ig&mid=32
     info: [javascript variable] URL=i.imwx.com/web/common/wxicons/31/
     info: [javascript variable] URL=i.imwx.com/web/common/wxicons/52/
     info: [javascript variable] URL=auth.weather.com/ursa/xml/desktop/installId/?prod=12&rand=
     info: [script] www-ig-opensocial.googleusercontent.com/gadgets/js/auth-refresh:core:core.iglegacy:core.io.js?container=ig&nocache=0&debug=0&c=0&v=8d34f01ddbdcead85b6c9e4cac18f6f3&sv=10&jsload=0
     info: [img] i.imwx.com/web/blank.gif
     info: [img] gadgets.weather.com/web/radar/usen.jpg
     info: [img] i.imwx.com/web/services/gadgets/images/57x54.png
     info: [img] www-ig-opensocial.googleusercontent.com/gadgets/ifr?js=1&js=1&url=http:/gadgets.weather.com/services/gadgets/googlegadget/gadget.xml&container=ig&view=default&lang=en&country=US&sanitize=0&v=5eef7f0c4394a1b1&parent=http:/
     info: [decodingLevel=0] found JavaScript
     error: line:134: SyntaxError: missing ; after for-loop condition:
          error: line:134: ', sizingMethod='scale');\" title=\"",e,'"></div>'].join("")}function b(){var a=[],c,d;for(d=0;d<arguments.length>=0){h=b("searchResults").options[a].value;n=b("searchResults").options[a].text}b("search").value="";O(e);R(c,d);a>=0&&P;(n,h);if(v()){b("canc
          error: line:134: ....................................................................................................................^
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE html PUBLIC "-/W3C/DTD HTML 4.01/EN" "http:/www.w3.org/TR/html4/strict.dtd">
          error: line:3: ...............^
     file: f03bac2307278026e7ed68c271528f962fc5073c: 31143 bytes

Decoded Files
f03b/ac2307278026e7ed68c271528f962fc5073c from www-ig-opensocial.googleusercontent.com/gadgets/ifr?js=1&js=1&url=http:/gadgets.weather.com/services/gadgets/googlegadget/gadget.xml&container=ig&view=default&lang=en&country=US&sanitize=0&v=5eef7f0c4394a1b1&parent=http:/www.google.com (31143 bytes, 2807 hidden) download


www.facebook.com/plugins/like.php