JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link d78beda087c1c2c1c5d511fc0c1cbee3f2600887 (Received 2018-02-13 14:24:06, script )

URLStatus
static.xx.fbcdn.net/rsrc.php/v3/y1/r/ status: (referer=static.xx.fbcdn.net/rsrc.php/v3/y1/r/KPiUKGFfisa.js)

www.facebook.com/widgets/like.php?href&_noscript=1&_noscript=1 status: (referer=www.facebook.com/widgets/like.php?href&_noscript=1)

www.youtube.com/v/ status: (referer=http:/www.ask.com/web?q=puppies)

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
yourjavascript.com/12333531211/fbpopup.js benign
[nothing detected] (script) yourjavascript.com/12333531211/fbpopup.js
     status: (referer=http:/www.ask.com/web?q=puppies)saved 15794 bytes c44cc87f3d047eedef793ea488f1a3146e837060
     info: [img] 3.bp.blogspot.com/-2O_4ROCuaO8/T03cF66EIgI/AAAAAAAAA_o/YBpD87uss/s1600/fblogo.png
     info: [img] 2.bp.blogspot.com/-YcF0Oaxfio0/T03LxEkkWoI/AAAAAAAAA_Q/eB5I-CA7NJE/s1600/fb.png
     info: [decodingLevel=0] found JavaScript
     suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
     file: c44cc87f3d047eedef793ea488f1a3146e837060: 15794 bytes
     file: 672b0acb63870c43e02309e010709773c07530b0: 16030 bytes
     file: ad3a1bee0c28faf55c663f6d99ef989e56d91c4f: 16036 bytes
     file: 7aba18f2d0a6a01482669fcd4d38ead13039d588: 16245 bytes
     file: af0b77a8c612befc5dcd3ad74c606fea22748d3e: 16437 bytes
     file: a133f9ae7d6c1df142a12864ae6d40553ef2307f: 16151 bytes
     file: f48a6c762a0c530a3e8ba512d3605e2a9f33e755: 16275 bytes

Decoded Files
c44c/c87f3d047eedef793ea488f1a3146e837060 from yourjavascript.com/12333531211/fbpopup.js (15794 bytes, 10 hidden) download

672b/0acb63870c43e02309e010709773c07530b0 from yourjavascript.com/12333531211/fbpopup.js (16030 bytes, 10 hidden) download

ad3a/1bee0c28faf55c663f6d99ef989e56d91c4f from yourjavascript.com/12333531211/fbpopup.js (16036 bytes, 10 hidden) download

7aba/18f2d0a6a01482669fcd4d38ead13039d588 from yourjavascript.com/12333531211/fbpopup.js (16245 bytes, 10 hidden) download

af0b/77a8c612befc5dcd3ad74c606fea22748d3e from yourjavascript.com/12333531211/fbpopup.js (16437 bytes, 10 hidden) download

a133/f9ae7d6c1df142a12864ae6d40553ef2307f from yourjavascript.com/12333531211/fbpopup.js (16151 bytes, 10 hidden) download

f48a/6c762a0c530a3e8ba512d3605e2a9f33e755 from yourjavascript.com/12333531211/fbpopup.js (16275 bytes, 10 hidden) download


static.xx.fbcdn.net/rsrc.php/v3/y1/r/KPiUKGFfisa.js benign
[nothing detected] (script) static.xx.fbcdn.net/rsrc.php/v3/y1/r/KPiUKGFfisa.js
     status: (referer=www.facebook.com/widgets/like.php?href&_noscript=1)saved 325213 bytes 1354f20a191a84db3d3a5a7eca9dcefdf09b512b
     info: [script] static.xx.fbcdn.net/rsrc.php/v3/y1/r/
     file: 1354f20a191a84db3d3a5a7eca9dcefdf09b512b: 325213 bytes

Decoded Files
1354/f20a191a84db3d3a5a7eca9dcefdf09b512b from static.xx.fbcdn.net/rsrc.php/v3/y1/r/KPiUKGFfisa.js (325213 bytes) download


www.facebook.com/widgets/like.php?href= benign
[nothing detected] (iframe) www.facebook.com/widgets/like.php?href=
     status: (referer=http:/www.ask.com/web?q=puppies)saved 742812 bytes 8526cdc879db5af6d6eba33dc071ded135143aa4
     info: [meta refresh] URL=www.facebook.com/widgets/like.php?href&_noscript=1
     info: [script] static.xx.fbcdn.net/rsrc.php/v3/y1/r/KPiUKGFfisa.js
     info: [decodingLevel=0] found JavaScript
     error: undefined variable requireLazy
     error: undefined function window.requireLazy
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE html>
          error: line:3: ..............^
     file: 8526cdc879db5af6d6eba33dc071ded135143aa4: 742812 bytes

Decoded Files
8526/cdc879db5af6d6eba33dc071ded135143aa4 from www.facebook.com/widgets/like.php?href= (742812 bytes) download


www.facebook.com/myfatehnetwork benign
[nothing detected] (jsvar) www.facebook.com/myfatehnetwork
     status: (referer=http:/www.ask.com/web?q=puppies)saved 1172 bytes ac66ebbc51b05ecb3ecf0d9316bb409c3bb7ed5d
     info: [meta refresh] URL=m.facebook.com/myfatehnetwork
     info: [decodingLevel=0] found JavaScript
     error: undefined function window.location.replace
     file: ac66ebbc51b05ecb3ecf0d9316bb409c3bb7ed5d: 1172 bytes

Decoded Files
ac66/ebbc51b05ecb3ecf0d9316bb409c3bb7ed5d from www.facebook.com/myfatehnetwork (1172 bytes) download


m.facebook.com/myfatehnetwork benign
[nothing detected] (metarefresh) m.facebook.com/myfatehnetwork
     status: (referer=www.facebook.com/myfatehnetwork)saved 4000 bytes 6eba0cebdabd8712cb639358d9bde584790c9131
     info: [img] static.xx.fbcdn.net/rsrc.php/v3/ym/r/Gjhrhb7r0lb.png
     info: [img] facebook.com/security/hsts-pixel.gif?c=3.2
     file: 6eba0cebdabd8712cb639358d9bde584790c9131: 4000 bytes

Decoded Files
6eba/0cebdabd8712cb639358d9bde584790c9131 from m.facebook.com/myfatehnetwork (4000 bytes) download


connect.facebook.net/US/all.js#xfbml=1 benign
[nothing detected] (script) connect.facebook.net/US/all.js#xfbml=1
     status: (referer=http:/www.ask.com/web?q=puppies)saved 211814 bytes c8d01b3b1ee50eaee1ce94953549a6a89650b8d2
     info: [iframe] connect.facebook.net/US/
     info: [decodingLevel=0] found JavaScript
     error: undefined variable Image
     error: line:194: TypeError: Image is not a constructor
     info: [element] URL=connect.facebook.net/US/undefined
     info: [1] no JavaScript
     file: c8d01b3b1ee50eaee1ce94953549a6a89650b8d2: 211814 bytes
     file: 6cec138e1f93c8237bb58fc9bfa92d672666d9e3: 144 bytes

Decoded Files
c8d0/1b3b1ee50eaee1ce94953549a6a89650b8d2 from connect.facebook.net/US/all.js#xfbml=1 (211814 bytes, 158 hidden) download

6cec/138e1f93c8237bb58fc9bfa92d672666d9e3 from connect.facebook.net/US/all.js#xfbml=1 (144 bytes) download


connect.facebook.net/US/ benign
[nothing detected] (iframe) connect.facebook.net/US/
     status: (referer=connect.facebook.net/US/all.js#xfbml=1)saved 35 bytes a7301b86364f32f40eb2016335e484e0738b1954
     file: a7301b86364f32f40eb2016335e484e0738b1954: 35 bytes

Decoded Files
a730/1b86364f32f40eb2016335e484e0738b1954 from connect.facebook.net/US/ (35 bytes) download


www.facebook.com/widgets/like.php?href&amp;_noscript=1 benign
[nothing detected] (metarefresh) www.facebook.com/widgets/like.php?href&amp;_noscript=1
     status: (referer=www.facebook.com/widgets/like.php?href=)saved 742863 bytes 1464f69a295cdf967f1609de2d1e4a335982c81c
     info: [meta refresh] URL=www.facebook.com/widgets/like.php?href&amp;amp%3B_noscript=1&amp;_noscript=1
     info: [script] static.xx.fbcdn.net/rsrc.php/v3/y1/r/KPiUKGFfisa.js
     file: 1464f69a295cdf967f1609de2d1e4a335982c81c: 742863 bytes

Decoded Files
1464/f69a295cdf967f1609de2d1e4a335982c81c from www.facebook.com/widgets/like.php?href&amp;_noscript=1 (742863 bytes) download


script benign
[nothing detected] script
     info: [javascript variable] URL=www.facebook.com/myfatehnetwork
     info: [img] 4.bp.blogspot.com/_WoCJXgXotb8/Srr309I/AAAAAAAAAB8/r9HXg7EGLYI/s1600/novideo.png
     info: [img] i2.ytimg.com/vi/
     info: [embed] www.youtube.com/v/
     info: [iframe] www.facebook.com/widgets/like.php?href=
     info: [script] connect.facebook.net/US/all.js#xfbml=1
     info: [script] yourjavascript.com/12333531211/fbpopup.js
     info: [decodingLevel=0] found JavaScript
     error: line:338: SyntaxError: missing ) after condition:
          error: line:338: if((document.getElementById)&&window.addEventListener;||window.attachEvent)
          error: line:338: ......................................................^
     file: 14aa732e134aae19b8ff0dcb866c68573a95850c: 31413 bytes

Decoded Files
14aa/732e134aae19b8ff0dcb866c68573a95850c from script (31413 bytes, 4091 hidden) download


connect.facebook.net/US/undefined benign
[nothing detected] (element) connect.facebook.net/US/undefined
     status: (referer=connect.facebook.net/US/all.js#xfbml=1)saved 35 bytes a7301b86364f32f40eb2016335e484e0738b1954
     file: a7301b86364f32f40eb2016335e484e0738b1954: 35 bytes

Decoded Files
a730/1b86364f32f40eb2016335e484e0738b1954 from connect.facebook.net/US/undefined (35 bytes) download