JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link cfa6de56678acc4b39c97472dcc985602684df5f (Received 2012-11-29 22:21:57, http://fleeceblanketinstruction.com/page/4 )

URLStatus
fleeceblanketinstruction.com/page/4 saved 30462 bytes 7f54d153640099bc04ef7a83c5ce5699fe37b1f1

www.881theburg.com/wp-content/themes/media/js/DD_belatedPNG_0.0.8a.js status: (referer=www.881theburg.com/)

www.881theburg.com/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.18 status: (referer=www.881theburg.com/)

www.881theburg.com/wp-content/plugins/nextgen-gallery/js/ngg.slideshow.min.js?ver=1.06 status: (referer=www.881theburg.com/)

www.881theburg.com/wp-content/plugins/nextgen-gallery/js/jquery.cycle.all.min.js?ver=2.9995 status: (referer=www.881theburg.com/)

www.881theburg.com/wp-content/themes/media/js/jquery.cycle.all.min.js?ver=3.4.2 status: (referer=www.881theburg.com/)

www.881theburg.com/ffmp3-config.swf status: (referer=www.881theburg.com/)

www.881theburg.com/wp-includes/js/swfobject.js?ver=2.2-20120417 status: (referer=www.881theburg.com/)

fleeceblanketinstruction.com/wp-content/themes/green-hope/js/undefined status: (referer=fleeceblanketinstruction.com/wp-content/themes/green-hope/js/belatedpng.js)

fleeceblanketinstruction.com/wp-includes/js/jquery/undefined status: (referer=fleeceblanketinstruction.com/wp-includes/js/jquery/jquery.js?ver=1.4.2)

www.881theburg.com/wp-content/themes/media/js/jquery-1.3.2.min.js status: (referer=www.881theburg.com/)

www.881theburg.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=3.3.1 status: (referer=www.881theburg.com/)

www.881theburg.com/wp-content/themes/media/js/jquery.coda-slider-2.0.js status: (referer=www.881theburg.com/)

www.ustream.tv/embed/6577308 status: (referer=www.881theburg.com/)

www.881theburg.com/wp-includes/js/jquery/jquery.js?ver=1.7.2 status: (referer=www.881theburg.com/)

www.881theburg.com/slider.php status: (referer=www.881theburg.com/)

www.881theburg.com/Axia/playlist.html status: (referer=www.881theburg.com/)

Warning: reading file /storagefiles/01a9//f32252423c92dd238fddec85351c1cdded1f failed
Warning: reading file /storagefiles/9bd8//8bb623922327a295617861455ee985ca3427 failed
Warning: reading file /storagefiles/c82a//7cfbd3b6df8f008002c858c5ce089e1767fd failed
Warning: reading file /storagefiles/dd4b//2bafc050a4a489eb789bbe385ee06f2a4de3 failed
Warning: reading file /storagefiles/f491//37f84d281ee11719844b087b382f5bdc64d2 failed
Warning: reading file /storagefiles/13b3//1a0518daedb25504c3f03235d783e800a916 failed

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
fleeceblanketinstruction.com/page/4 benign
[nothing detected] fleeceblanketinstruction.com/page/4
     status: (referer=http:/www.ask.com/web?q=puppies)saved 30462 bytes 7f54d153640099bc04ef7a83c5ce5699fe37b1f1
     info: [javascript variable] URL=www.881theburg.com/
     info: [script] fleeceblanketinstruction.com/wp-content/themes/green-hope/js/belatedpng.js
     info: [script] fleeceblanketinstruction.com/wp-includes/js/jquery/jquery.js?ver=1.4.2
     info: [img] fleeceblanketinstruction.com/wp-content/uploads/2011/03/images10.jpg
     info: [img] fleeceblanketinstruction.com/wp-content/uploads/2011/06/personalized-fleece-blankets-144x150.jpg
     info: [embed] ws.amazon.com/widgets/q?rt=cw&ServiceVersion=20070822&MarketPlace=US&ID=V20070822%2FUS%2Ftiphealif-20%2F8010%2F63a5a25c-274c-4322-af61-f32bd8a632bc&Operation=GetDisplayTemplate
     info: [decodingLevel=0] found JavaScript
     info: [var gaJsHost] URL=www.
     info: [var newurl] URL=www.
     info: [script] www.google-analytics.com/ga.js
     info: [decodingLevel=1] found JavaScript
     error: line:6: SyntaxError: missing = in XML attribute:
          error: line:6: <style undefined>.dnn{position:absolute;top:-9999px}</style><style undefined>.nemonn{position:absolute;top:-9999px}</style><script src='http:/www.google-analytics.com/ga.js' type='text/javascript'></script>
          error: line:6: ................^
     file: 7f54d153640099bc04ef7a83c5ce5699fe37b1f1: 30462 bytes
     file: 5bef7f4db61ba5a121b9a27ece00f40f3d501c14: 315 bytes

Decoded Files
7f54/d153640099bc04ef7a83c5ce5699fe37b1f1 from fleeceblanketinstruction.com/page/4 (30462 bytes, 337 hidden) download

5bef/7f4db61ba5a121b9a27ece00f40f3d501c14 from fleeceblanketinstruction.com/page/4 (315 bytes) download


www.881theburg.com/ benign
[nothing detected] (jsvar) www.881theburg.com/
     status: (referer=fleeceblanketinstruction.com/page/4)saved 37916 bytes f52d4d20ae30479490c00f8b9f0887a5140dea76
     info: [script] www.881theburg.com/wp-content/themes/media/js/jquery-1.3.2.min.js
     info: [script] www.881theburg.com/wp-content/themes/media/js/jquery.easing.1.3.js
     info: [script] www.881theburg.com/wp-content/themes/media/js/jquery.coda-slider-2.0.js
     info: [script] www.881theburg.com/wp-content/themes/media/js/DD_belatedPNG_0.0.8a.js
     info: [script] www.881theburg.com/wp-includes/js/jquery/jquery.js?ver=1.7.2
     info: [script] www.881theburg.com/wp-content/plugins/nextgen-gallery/shutter/shutter-reloaded.js?ver=1.3.3
     info: [script] www.881theburg.com/wp-content/plugins/nextgen-gallery/js/jquery.cycle.all.min.js?ver=2.9995
     info: [script] www.881theburg.com/wp-content/plugins/nextgen-gallery/js/ngg.slideshow.min.js?ver=1.06
     info: [script] www.881theburg.com/wp-content/themes/media/js/jquery.cycle.all.min.js?ver=3.4.2
     info: [img] www.881theburg.com/images/HII.png
     info: [iframe] www.ustream.tv/embed/6577308
     info: [embed] www.881theburg.com/ffmp3-config.swf
     info: [img] www.881theburg.com/images/np.png
     info: [img] www.881theburg.com/images/showsched.png
     info: [img] www.881theburg.com/images/oursponsors.png
     info: [img] www.881theburg.com/images/blogandnews.png
     info: [img] counters.gigya.com/wildfire/IMP/CXNID=2000002.0NXC/bT*xJmx*PTEyODg*NTQzNjA4MzYmcHQ9MTI4ODQ1NDM3MjgxOCZwPTEyMzQ*ODEmZD1BZGRUaGlzXzM2aHJ2MS4xLjAmZz*xJm89/OTQ1YWI2N2NmZjRmNGM4ZGFiMmExZWU4NGYxZTQ3ZTQmb2Y9MA==.gif
     info: [embed] s.imwx.com/v.20100719.135915/img/swf/twc-widget-wrapper.swf
     info: [img] www.881theburg.com/
     info: [iframe] www.881theburg.com/Axia/playlist.html
     info: [img] www.881theburg.com/images/OnAir.png
     info: [img] www.881theburg.com/images/chatListen.png
     info: [iframe] www.881theburg.com/slider.php
     info: [img] www.881theburg.com/wp-includes/images/rss.png
     info: [script] www.881theburg.com/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.18
     info: [script] www.881theburg.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=3.3.1
     info: [script] www.881theburg.com/wp-includes/js/swfobject.js?ver=2.2-20120417
     info: [script] www.881theburg.com/wp-content/plugins/slideshow-jquery-image-gallery/js/SlideshowPlugin/slideshow.js?ver=3.4.2
     info: [decodingLevel=0] found JavaScript
     error: undefined variable $
     error: undefined function $
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE html PUBLIC "-/W3C/DTD XHTML 1.0 Transitional/EN" "http:/www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
          error: line:3: ...............^
     file: f52d4d20ae30479490c00f8b9f0887a5140dea76: 37916 bytes

Decoded Files
f52d/4d20ae30479490c00f8b9f0887a5140dea76 from www.881theburg.com/ (37916 bytes, 2297 hidden) download


ws.amazon.com/widgets/q?rt=cw&ServiceVersion=20070822&MarketPlace=US&ID=V20070822/US/tiphealif-20/8010/63a5a25c-274c-4322-af61-f32bd8a632bc&Operation=GetDisplayTemplate benign
[nothing detected] [SWF] (embed) ws.amazon.com/widgets/q?rt=cw&ServiceVersion=20070822&MarketPlace=US&ID=V20070822/US/tiphealif-20/8010/63a5a25c-274c-4322-af61-f32bd8a632bc&Operation=GetDisplayTemplate
     status: (referer=fleeceblanketinstruction.com/page/4)saved 24461 bytes 9806a66532f0f0b091d6115801ecdd58c189fae3
     info: [0] no JavaScript
     file: 9806a66532f0f0b091d6115801ecdd58c189fae3: 24461 bytes

Decoded Files
9806/a66532f0f0b091d6115801ecdd58c189fae3 from ws.amazon.com/widgets/q?rt=cw&ServiceVersion=20070822&MarketPlace=US&ID=V20070822/US/tiphealif-20/8010/63a5a25c-274c-4322-af61-f32bd8a632bc&Operation=GetDisplayTemplate (24461 bytes, 14620 hidden) download


www.google-analytics.com/ga.js benign
[nothing detected] (script) www.google-analytics.com/ga.js
     status: (referer=fleeceblanketinstruction.com/page/4)saved 37362 bytes 142a9875c4bd7e15ce6ac8b5bb181fb29ed08ba5
     info: [decodingLevel=0] found JavaScript
     file: 142a9875c4bd7e15ce6ac8b5bb181fb29ed08ba5: 37362 bytes

Decoded Files
142a/9875c4bd7e15ce6ac8b5bb181fb29ed08ba5 from www.google-analytics.com/ga.js (37362 bytes) download


fleeceblanketinstruction.com/wp-includes/js/jquery/jquery.js?ver=1.4.2 benign
[nothing detected] (script) fleeceblanketinstruction.com/wp-includes/js/jquery/jquery.js?ver=1.4.2
     status: (referer=fleeceblanketinstruction.com/page/4)saved 72194 bytes 03ccc942f9db2628695286b3f5b030fa643fbe42
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [decodingLevel=0] found JavaScript
     error: undefined variable d.style
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var d.style = 1;
          error: line:1: ....^
     info: Decoding option navigator.systemLanguage=en and navigator.systemLanguage=zh-cn and browser=IE7/XP and browser=IE8/Vista and browser=Opera and browser=Firefox,      0 bytes
     info: Decoding option navigator.systemLanguage=en and navigator.systemLanguage=zh-cn and browser=IE7/XP and browser=IE8/Vista and browser=Opera and browser=Firefox,      147 bytes
     info: [element] URL=fleeceblanketinstruction.com/wp-includes/js/jquery/undefined
     info: [1] no JavaScript
     file: 03ccc942f9db2628695286b3f5b030fa643fbe42: 72194 bytes
     file: 856970df15bbb0cc248844c465fd3df0588df947: 147 bytes

Decoded Files
03cc/c942f9db2628695286b3f5b030fa643fbe42 from fleeceblanketinstruction.com/wp-includes/js/jquery/jquery.js?ver=1.4.2 (72194 bytes) download

8569/70df15bbb0cc248844c465fd3df0588df947 from fleeceblanketinstruction.com/wp-includes/js/jquery/jquery.js?ver=1.4.2 (147 bytes) download


www.881theburg.com/wp-content/themes/media/js/jquery.easing.1.3.js benign
[nothing detected] (script) www.881theburg.com/wp-content/themes/media/js/jquery.easing.1.3.js
     status: (referer=www.881theburg.com/)saved 8097 bytes 82e40d060bc269a6dde20c3990ca5a4fea6ca754
     file: 82e40d060bc269a6dde20c3990ca5a4fea6ca754: 8097 bytes

Decoded Files
82e4/0d060bc269a6dde20c3990ca5a4fea6ca754 from www.881theburg.com/wp-content/themes/media/js/jquery.easing.1.3.js (8097 bytes, 203 hidden) download


www.881theburg.com/wp-content/plugins/slideshow-jquery-image-gallery/js/SlideshowPlugin/slideshow.js?ver=3.4.2 benign
[nothing detected] (script) www.881theburg.com/wp-content/plugins/slideshow-jquery-image-gallery/js/SlideshowPlugin/slideshow.js?ver=3.4.2
     status: (referer=www.881theburg.com/)saved 6168 bytes a1236e5b9d96bd8bd0c1d80b92364d6755e584bb
     file: a1236e5b9d96bd8bd0c1d80b92364d6755e584bb: 6168 bytes

Decoded Files
a123/6e5b9d96bd8bd0c1d80b92364d6755e584bb from www.881theburg.com/wp-content/plugins/slideshow-jquery-image-gallery/js/SlideshowPlugin/slideshow.js?ver=3.4.2 (6168 bytes) download


www.881theburg.com/wp-content/plugins/nextgen-gallery/shutter/shutter-reloaded.js?ver=1.3.3 benign
[nothing detected] (script) www.881theburg.com/wp-content/plugins/nextgen-gallery/shutter/shutter-reloaded.js?ver=1.3.3
     status: (referer=www.881theburg.com/)saved 9986 bytes fd7e089a6c10d591dc15faf54395bb5a8b74a1ea
     info: [img] www.881theburg.com/wp-content/plugins/nextgen-gallery/shutter/
     info: [decodingLevel=0] found JavaScript
     suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
     file: fd7e089a6c10d591dc15faf54395bb5a8b74a1ea: 9986 bytes
     file: 01a9f32252423c92dd238fddec85351c1cdded1f: 10322 bytes
     file: 9bd88bb623922327a295617861455ee985ca3427: 10328 bytes
     file: c82a7cfbd3b6df8f008002c858c5ce089e1767fd: 10537 bytes
     file: dd4b2bafc050a4a489eb789bbe385ee06f2a4de3: 10729 bytes
     file: f49137f84d281ee11719844b087b382f5bdc64d2: 10443 bytes
     file: 13b31a0518daedb25504c3f03235d783e800a916: 10567 bytes

Decoded Files
fd7e/089a6c10d591dc15faf54395bb5a8b74a1ea from www.881theburg.com/wp-content/plugins/nextgen-gallery/shutter/shutter-reloaded.js?ver=1.3.3 (9986 bytes, 661 hidden) download

01a9/f32252423c92dd238fddec85351c1cdded1f from www.881theburg.com/wp-content/plugins/nextgen-gallery/shutter/shutter-reloaded.js?ver=1.3.3 9bd8/8bb623922327a295617861455ee985ca3427 from www.881theburg.com/wp-content/plugins/nextgen-gallery/shutter/shutter-reloaded.js?ver=1.3.3 c82a/7cfbd3b6df8f008002c858c5ce089e1767fd from www.881theburg.com/wp-content/plugins/nextgen-gallery/shutter/shutter-reloaded.js?ver=1.3.3 dd4b/2bafc050a4a489eb789bbe385ee06f2a4de3 from www.881theburg.com/wp-content/plugins/nextgen-gallery/shutter/shutter-reloaded.js?ver=1.3.3 f491/37f84d281ee11719844b087b382f5bdc64d2 from www.881theburg.com/wp-content/plugins/nextgen-gallery/shutter/shutter-reloaded.js?ver=1.3.3 13b3/1a0518daedb25504c3f03235d783e800a916 from www.881theburg.com/wp-content/plugins/nextgen-gallery/shutter/shutter-reloaded.js?ver=1.3.3

fleeceblanketinstruction.com/wp-content/themes/green-hope/js/belatedpng.js benign
[nothing detected] (script) fleeceblanketinstruction.com/wp-content/themes/green-hope/js/belatedpng.js
     status: (referer=fleeceblanketinstruction.com/page/4)saved 7019 bytes 11ff3e17f13ed3488063e30a36f8b45ca3f5f2df
     info: [decodingLevel=0] found JavaScript
     error: undefined variable document.documentElement.firstChild
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var document.documentElement.firstChild = 1;
          error: line:1: ....^
     info: [element] URL=fleeceblanketinstruction.com/wp-content/themes/green-hope/js/undefined
     info: [1] no JavaScript
     file: 11ff3e17f13ed3488063e30a36f8b45ca3f5f2df: 7019 bytes
     file: 13532b7da4041b6f071fa13e0d5fbc64ccfa6e40: 74 bytes

Decoded Files
11ff/3e17f13ed3488063e30a36f8b45ca3f5f2df from fleeceblanketinstruction.com/wp-content/themes/green-hope/js/belatedpng.js (7019 bytes) download

1353/2b7da4041b6f071fa13e0d5fbc64ccfa6e40 from fleeceblanketinstruction.com/wp-content/themes/green-hope/js/belatedpng.js (74 bytes) download


s.imwx.com/v.20100719.135915/img/swf/twc-widget-wrapper.swf benign
[nothing detected] [SWF] (embed) s.imwx.com/v.20100719.135915/img/swf/twc-widget-wrapper.swf
     status: (referer=www.881theburg.com/)saved 59839 bytes b05b2fd3eaf65648d8c78f7708af7395c52b14d7
     info: [0] no JavaScript
     file: b05b2fd3eaf65648d8c78f7708af7395c52b14d7: 59839 bytes

Decoded Files
b05b/2fd3eaf65648d8c78f7708af7395c52b14d7 from s.imwx.com/v.20100719.135915/img/swf/twc-widget-wrapper.swf (59839 bytes, 36065 hidden) download