JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link d9bcf540b140ee9559bbf000294ea076c5bbfb12 (Received 2012-08-25 14:18:58, https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1345921785&rver=6.1.6206.0&wp=MBI&wreply=http:%2F%2Fmail.live.com%2Fdefault.aspx&lc=1033&id=64855&mkt=en-us&cbcxt=mai&snsc=1 )

URLStatus
login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1345921785&rver=6.1.6206.0&wp=MBI&wreply=http:%2F%2Fmail.live.com%2Fdefault.aspx&lc=1033&id=64855&mkt=en-us&cbcxt=mai&snsc=1 saved 10855 bytes 76fc22fdce330cc5db363aa82d21bf36c240783d

All Malicious or Suspicious Elements of Submission

None
Js.wlxrs.com/~Live.SiteContent.ID/~16.4.19/~/~/~/~/js/LCore.js benign
[nothing detected] (script) Js.wlxrs.com/~Live.SiteContent.ID/~16.4.19/~/~/~/~/js/LCore.js
     status: (referer=login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1345921785&rver=6.1.6206.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&lc=1033&id=64855&mkt=en-us&cbcxt=mai&snsc=1)saved 107158 bytes 5928061bcd95612346a77ae9f5ee9cb6e1903699
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [decodingLevel=0] found JavaScript
     file: 5928061bcd95612346a77ae9f5ee9cb6e1903699: 107158 bytes

Decoded Files
5928/061bcd95612346a77ae9f5ee9cb6e1903699 from Js.wlxrs.com/~Live.SiteContent.ID/~16.4.19/~/~/~/~/js/LCore.js (107158 bytes, 4 hidden) download


login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1345921785&rver=6.1.6206.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&lc=1033&id=64855&mkt=en-us&cbcxt=mai&snsc=1 benign
[nothing detected] login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1345921785&rver=6.1.6206.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&lc=1033&id=64855&mkt=en-us&cbcxt=mai&snsc=1
     status: (referer=http:/twitter.com/trends/)saved 10855 bytes 76fc22fdce330cc5db363aa82d21bf36c240783d
     info: [meta refresh] URL=login.live.com/jsDisabled.srf?mkt=EN-US&lc=1033
     info: [script] Js.wlxrs.com/~Live.SiteContent.ID/~16.4.19/~/~/~/~/js/LSJS1033.js
     info: [script] Js.wlxrs.com/~Live.SiteContent.ID/~16.4.19/~/~/~/~/js/LCore.js
     info: [decodingLevel=0] found JavaScript
     error: line:8: SyntaxError: missing } after property list:
          error: line:8: Microsoft account or create a new account. <a href="">Learn More</a>",K:false,A3:"Help us make sure you\'re not a robot. <a href="">Why?</a>",L:1,A4:"Sign in to .",N:3,A6:"A single-use code lets you sign in without entering your password. This helps prote
          error: line:8: ....................................................^
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE html><!-- ServerInfo: BAYIDSLGN1G46 2012.08.07.00.03.17 Live1 Unknown LocVer:0 -->
          error: line:3: ..............^
     file: 76fc22fdce330cc5db363aa82d21bf36c240783d: 10855 bytes

Decoded Files
76fc/22fdce330cc5db363aa82d21bf36c240783d from login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1345921785&rver=6.1.6206.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&lc=1033&id=64855&mkt=en-us&cbcxt=mai&snsc=1 (10855 bytes, 20 hidden) download


Js.wlxrs.com/~Live.SiteContent.ID/~16.4.19/~/~/~/~/js/LSJS1033.js benign
[nothing detected] (script) Js.wlxrs.com/~Live.SiteContent.ID/~16.4.19/~/~/~/~/js/LSJS1033.js
     status: (referer=login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1345921785&rver=6.1.6206.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&lc=1033&id=64855&mkt=en-us&cbcxt=mai&snsc=1)saved 4993 bytes e2a40b60882fca0c5721a2c093196b694e10c325
     info: [decodingLevel=0] found JavaScript
     file: e2a40b60882fca0c5721a2c093196b694e10c325: 4993 bytes

Decoded Files
e2a4/0b60882fca0c5721a2c093196b694e10c325 from Js.wlxrs.com/~Live.SiteContent.ID/~16.4.19/~/~/~/~/js/LSJS1033.js (4993 bytes, 3 hidden) download


login.live.com/jsDisabled.srf?mkt=EN-US&lc=1033 benign
[nothing detected] (metarefresh) login.live.com/jsDisabled.srf?mkt=EN-US&lc=1033
     status: (referer=login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1345921785&rver=6.1.6206.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&lc=1033&id=64855&mkt=en-us&cbcxt=mai&snsc=1)saved 1134 bytes 2c4b058a6a578fc768c7df0fc8718483d873b564
     info: [img] login.live.com/images/WLIDLogo.gif?x=13.5.20706.0
     info: [0] no JavaScript
     file: 2c4b058a6a578fc768c7df0fc8718483d873b564: 1134 bytes

Decoded Files
2c4b/058a6a578fc768c7df0fc8718483d873b564 from login.live.com/jsDisabled.srf?mkt=EN-US&lc=1033 (1134 bytes, 2 hidden) download