JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link f158ca1722108bedb54e34045408fbd11f8e448b (Received 2012-09-20 07:46:47, http://cdn1.clkads.com/script/tbcore_1.0.18.js )

URLStatus
cdn1.clkads.com/script/1.0.18.js saved 22969 bytes dc38596a3f7122b33c8af330e891831964c4673e

videoconverter.softango.com/test-ft/ status: (referer=cdn.optimizely.com/js/25528774.js)

go.tvnoop.com/lp/rh/prpl/index2.php status: (referer=cdn.optimizely.com/js/25528774.js)

success.softango.com/28378/vindex4.html status: (referer=cdn.optimizely.com/js/25528774.js)

zoolagames.com/lp/tst/index.html status: (referer=cdn.optimizely.com/js/25528774.js)

www.thevideoperformer.com/downloadmanager/dm1.php status: (referer=cdn.optimizely.com/js/25528774.js)

thevideoperformer.com/lp/index-wok.php status: (referer=cdn.optimizely.com/js/25528774.js)

zoolagames.com/lp/tst/jquest/ status: (referer=cdn.optimizely.com/js/25528774.js)

games.zoolagames.com/ status: (referer=cdn.optimizely.com/js/25528774.js)

go.fasterbetterpc.com/pcperformer/tst/pcperformer-rh-rh-st2-free-en5.php status: (referer=cdn.optimizely.com/js/25528774.js)

www.appround.biz/bestcodecspack/v3/v4.php status: (referer=cdn.optimizely.com/js/25528774.js)

go.zoolagames.com/lp/ibr/frg/ibr-frg-7wonders-en.php status: (referer=cdn.optimizely.com/js/25528774.js)

zoolagames.com/lp/tst/farmer/ status: (referer=cdn.optimizely.com/js/25528774.js)

zoolagames.com/lp/rh/z3/rh-z3-free-en.php status: (referer=cdn.optimizely.com/js/25528774.js)

go.performersoft.com/templates/driverperformer/dr2/ status: (referer=cdn.optimizely.com/js/25528774.js)

www.thevideoperformer.com/downloadmanager/mini2/dm2.php status: (referer=cdn.optimizely.com/js/25528774.js)

go.fasterbetterpc.com/pcperformer/tst/pcperformer-rh-rh-st2-free-en0.php status: (referer=cdn.optimizely.com/js/25528774.js)

vax9.com/lp/tst/table/index.html status: (referer=cdn.optimizely.com/js/25528774.js)

thevideoperformer.com/downloadmanager/lp002.php status: (referer=cdn.optimizely.com/js/25528774.js)

videoconverter.softango.com/index2.html status: (referer=cdn.optimizely.com/js/25528774.js)

www.pdfperformer.net/pdfperformer/index2.php status: (referer=cdn.optimizely.com/js/25528774.js)

www.appround.us/pcperformer/tst/rh-st2-tst.html status: (referer=cdn.optimizely.com/js/25528774.js)

success.softango.com/28378/vindex.html status: (referer=cdn.optimizely.com/js/25528774.js)

zoolagames.com/lp/ibr/z4/index.php status: (referer=cdn.optimizely.com/js/25528774.js)

success.softango.com/28378/vindex3.html status: (referer=cdn.optimizely.com/js/25528774.js)

driverperformer.fr/fr/pilotes.php status: (referer=cdn.optimizely.com/js/25528774.js)

cdn.performersoft.com/media/videoperformer/vp1/jquery.backstretch.js status: (referer=www.tube2file.com/rhlp/tube2lp.php)

performersoft.com/converters/vconverter/pcperformer.php status: (referer=cdn.optimizely.com/js/25528774.js)

cdn.performersoft.com/media/videoperformer/vp1/jquery-1.4.2.min.js status: (referer=www.tube2file.com/rhlp/tube2lp.php)

zoolagames.com/lp/zoola15412/index4.php status: (referer=cdn.optimizely.com/js/25528774.js)

www.thevideoperformer.com/downloadmanager/lp/index.php status: (referer=cdn.optimizely.com/js/25528774.js)

cdn.performersoft.com/media/videoperformer/vp1/jquery.backstretch.min.js status: (referer=www.tube2file.com/rhlp/tube2lp.php)

performersoft.com/dr2412.php status: (referer=cdn.optimizely.com/js/25528774.js)

audioconverter.softango.com/ status: (referer=cdn.optimizely.com/js/25528774.js)

zoolagames.com/lp/zoola15412/index3.php status: (referer=cdn.optimizely.com/js/25528774.js)

go.tvnoop.com/lp.php status: (referer=cdn.optimizely.com/js/25528774.js)

zoolagames.com/lp/zoola15412/index5.php status: (referer=cdn.optimizely.com/js/25528774.js)

www.facebook.com/plugins/likebox.php?id=134594759899826&width=292&connections=10&stream=false&header=true&height=287 status: (referer=zoolagames.com/lp/ibar.php)

go.performersoft.com/videoperformer/rh/rh/vp3/multi/videoperformer-rh-rh-vp3-multi-en.php status: (referer=cdn.optimizely.com/js/25528774.js)

success.softango.com/t-pages/1/landing-page.html status: (referer=cdn.optimizely.com/js/25528774.js)

appround.us/bestcodecspack/rh/lptst.php status: (referer=cdn.optimizely.com/js/25528774.js)

zoolagames.com/lp/zoola15412/index.php status: (referer=cdn.optimizely.com/js/25528774.js)

zoolagames.com/ status: (referer=cdn.optimizely.com/js/25528774.js)

Warning: reading file /storagefiles/1533//81c734ff22dad9f831ed094d3f496702021a failed
Warning: reading file /storagefiles/ec6a//301a16e066645548a5a3c733811790a249cd failed
Warning: reading file /storagefiles/10eb//cb8e6321e64489eefbb70603049328e1deab failed
Warning: reading file /storagefiles/fd50//4f542467768b3585e86754484008d22440fe failed
Warning: reading file /storagefiles/a039//96b1de06f45f0c75ca9892dd43bb019b8098 failed
Warning: reading file /storagefiles/4d9b//ee4ab3a91a2b70945fcde627ddfd93449e9e failed
Warning: reading file /storagefiles/8727//7254ea05647f678123e8ebbc5072790ea379 failed
Warning: reading file /storagefiles/e53a//3375428e8c202130e09bc8c2acaacca29fce failed
Warning: reading file /storagefiles/d2f0//57cce8a5228743154c2773c6aa73ff7ae4b2 failed
Warning: reading file /storagefiles/3c6d//56d0d46df16c3182e807ad879f33e0c1357d failed

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
clkads.com/adServe/coupons?cid= benign
[nothing detected] (setAttribute src) clkads.com/adServe/coupons?cid=
     status: (referer=cdn1.clkads.com/script/1.0.18.js)saved 16 bytes 7ac28b55fb76b987f23a6b0c7f6ff9beb1f98ca7
     info: [0] no JavaScript
     file: 7ac28b55fb76b987f23a6b0c7f6ff9beb1f98ca7: 16 bytes

Decoded Files
7ac2/8b55fb76b987f23a6b0c7f6ff9beb1f98ca7 from clkads.com/adServe/coupons?cid= (16 bytes) download


cdn.fasterbetterpc.com/media/ie9dl/ie9dl.js benign
[nothing detected] (script) cdn.fasterbetterpc.com/media/ie9dl/ie9dl.js
     status: (referer=clkads.com/adServe/directCampClick?tid=)saved 1295 bytes 8d290e965a66acafc512444e57475900ca1b0b35
     info: [decodingLevel=0] found JavaScript
     file: 8d290e965a66acafc512444e57475900ca1b0b35: 1295 bytes

Decoded Files
8d29/0e965a66acafc512444e57475900ca1b0b35 from cdn.fasterbetterpc.com/media/ie9dl/ie9dl.js (1295 bytes, 109 hidden) download


cdn.optimizely.com/js/25528774.js benign
[nothing detected] (script) cdn.optimizely.com/js/25528774.js
     status: (referer=clkads.com/adServe/directCampClick?tid=)saved 253366 bytes b88a91530608720ffb0e181f3c0f17b53844b2e8
     info: [javascript variable] URL=go.zoolagames.com/lp/ibr/frg/ibr-frg-7wonders-en.php
     info: [javascript variable] URL=zoolagames.com/lp/zoola15412/index5.php
     info: [javascript variable] URL=driverperformer.fr/fr/pilotes.php
     info: [javascript variable] URL=videoconverter.softango.com/test-ft/
     info: [javascript variable] URL=success.softango.com/t-pages/1/landing-page.html
     info: [javascript variable] URL=zoolagames.com/lp/ibar.php
     info: [javascript variable] URL=zoolagames.com/lp/zoola15412/index4.php
     info: [javascript variable] URL=thevideoperformer.com/lp/index-wok.php
     info: [javascript variable] URL=www.thevideoperformer.com/downloadmanager/lp/index.php
     info: [javascript variable] URL=zoolagames.com/lp/rh/z3/rh-z3-free-en.php
     info: [javascript variable] URL=zoolagames.com/lp/zoola15412/index.php
     info: [javascript variable] URL=go.tvnoop.com/lp/rh/prpl/index2.php
     info: [javascript variable] URL=www.appround.us/pcperformer/tst/rh-st2-tst.html
     info: [javascript variable] URL=thevideoperformer.com/downloadmanager/lp002.php
     info: [javascript variable] URL=zoolagames.com/lp/zoola15412/index3.php
     info: [javascript variable] URL=audioconverter.softango.com/
     info: [javascript variable] URL=www.thevideoperformer.com/downloadmanager/mini2/dm2.php
     info: [javascript variable] URL=success.softango.com/28378/vindex.html
     info: [javascript variable] URL=go.performersoft.com/templates/driverperformer/dr2/
     info: [javascript variable] URL=success.softango.com/28378/vindex1.html
     info: [javascript variable] URL=success.softango.com/28378/vindex3.html
     info: [javascript variable] URL=success.softango.com/28378/vindex4.html
     info: [javascript variable] URL=zoolagames.com/lp/tst/farmer/
     info: [javascript variable] URL=zoolagames.com
     info: [javascript variable] URL=go.fasterbetterpc.com/pcperformer/tst/pcperformer-rh-rh-st2-free-en5.php
     info: [javascript variable] URL=www.appround.biz/bestcodecspack/v3/v4.php
     info: [javascript variable] URL=www.thevideoperformer.com/downloadmanager/dm1.php
     info: [javascript variable] URL=zoolagames.com/lp/tst/index.html
     info: [javascript variable] URL=www.pdfperformer.net/pdfperformer/index2.php
     info: [javascript variable] URL=performersoft.com/dr2412.php
     info: [javascript variable] URL=videoconverter.softango.com/index2.html
     info: [javascript variable] URL=games.zoolagames.com
     info: [javascript variable] URL=go.tvnoop.com/lp.php
     info: [javascript variable] URL=zoolagames.com/lp/ibr/z4/index.php
     info: [javascript variable] URL=performersoft.com/converters/vconverter/pcperformer.php
     info: [javascript variable] URL=zoolagames.com/lp/tst/jquest/
     info: [javascript variable] URL=go.performersoft.com/videoperformer/rh/rh/vp3/multi/videoperformer-rh-rh-vp3-multi-en.php
     info: [javascript variable] URL=www.tube2file.com/rhlp/tube2lp.php
     info: [javascript variable] URL=appround.us/bestcodecspack/rh/lptst.php
     info: [javascript variable] URL=go.fasterbetterpc.com/pcperformer/tst/pcperformer-rh-rh-st2-free-en0.php
     info: [javascript variable] URL=vax9.com/lp/tst/table/index.html
     info: [img] cdn.optimizely.com/js/\
     info: [decodingLevel=0] found JavaScript
     error: undefined variable a
     file: b88a91530608720ffb0e181f3c0f17b53844b2e8: 253366 bytes

Decoded Files
b88a/91530608720ffb0e181f3c0f17b53844b2e8 from cdn.optimizely.com/js/25528774.js (253366 bytes, 112 hidden) download


clkads.com/adServe/directCampClick?tid= benign
[nothing detected] (jsvar) clkads.com/adServe/directCampClick?tid=
     status: (referer=cdn1.clkads.com/script/1.0.18.js)saved 13525 bytes 7e50142243a7c2ce2671788286430fa9326d7e4f
     info: [script] cdn.optimizely.com/js/25528774.js
     info: [script] cdn.fasterbetterpc.com/media/ie9dl/ie9dl.js
     info: [img] seals.trustedverified.com/fasterbetterpc.com/small.png
     info: [img] seals.trustedverified.com/fasterbetterpc.com/small.png
     info: [img] cdn.fasterbetterpc.com/media/pcperformer/st2/dl.png
     info: [img] cdn.fasterbetterpc.com/media/pcperformer/st2/step1_download.png
     info: [img] cdn.fasterbetterpc.com/media/pcperformer/st2/step2_run.png
     info: [img] cdn.fasterbetterpc.com/media/pcperformer/st2/step3_done.png
     info: [img] cdn.fasterbetterpc.com/media/pcperformer/st2/smalldownload.gif
     info: [img] cdn.fasterbetterpc.com/media/pcperformer/st2/yes.png
     info: [img] cdn.fasterbetterpc.com/media/pcperformer/st2/1.jpg
     info: [img] cdn.fasterbetterpc.com/media/pcperformer/st2/2.jpg
     info: [img] cdn.fasterbetterpc.com/media/pcperformer/st2/3.jpg
     info: [img] cdn.fasterbetterpc.com/media/pcperformer/st2/4.jpg
     info: [img] cdn.fasterbetterpc.com/media/pcperformer/st2/5.jpg
     info: [img] cdn.fasterbetterpc.com/media/pcperformer/st2/6.jpg
     info: [img] www.ibario.com/images/popup-close.gif
     info: [img] www.ibario.com/images/popup/button2.gif
     info: [script] www.ibario.com/tools/popup-dialog.js
     info: [decodingLevel=0] found JavaScript
     error: undefined variable s
     info: [1] no JavaScript
     file: 7e50142243a7c2ce2671788286430fa9326d7e4f: 13525 bytes
     file: f9e4048e7e87436e12343dbcd9d467a31f0c972e: 93 bytes

Decoded Files
7e50/142243a7c2ce2671788286430fa9326d7e4f from clkads.com/adServe/directCampClick?tid= (13525 bytes, 629 hidden) download

f9e4/048e7e87436e12343dbcd9d467a31f0c972e from clkads.com/adServe/directCampClick?tid= (93 bytes) download


success.softango.com/28378/vindex1.html benign
[nothing detected] (jsvar) success.softango.com/28378/vindex1.html
     status: (referer=cdn.optimizely.com/js/25528774.js)saved 571 bytes a07222d717e4c5f09dc8948e58b0a68917591dfe
     info: [0] no JavaScript
     file: a07222d717e4c5f09dc8948e58b0a68917591dfe: 571 bytes

Decoded Files
a072/22d717e4c5f09dc8948e58b0a68917591dfe from success.softango.com/28378/vindex1.html (571 bytes, 13 hidden) download


cdn1.clkads.com/script/1.0.18.js benign
[nothing detected] cdn1.clkads.com/script/1.0.18.js
     status: (referer=http:/www.ask.com/web?q=puppies)saved 22969 bytes dc38596a3f7122b33c8af330e891831964c4673e
     info: [javascript variable] URL=clkads.com/adServe/findAd?num=
     info: [javascript variable] URL=clkads.com/adServe/directCampClick?tid=
     info: [img] cdn1.clkads.com/script/
     info: [iframe] cdn1.clkads.com/script/
     info: [decodingLevel=0] found JavaScript
     error: undefined variable document.getElementsByTagName("head")[0]
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var document.getElementsByTagName("head")[0] = 1;
          error: line:1: ....^
     info: [setAttribute src] URL=clkads.com/adServe/coupons?cid=
     info: [1] no JavaScript
     file: dc38596a3f7122b33c8af330e891831964c4673e: 22969 bytes
     file: 1275294ecd010d971f74bb5151b8deac1bd80728: 138 bytes

Decoded Files
dc38/596a3f7122b33c8af330e891831964c4673e from cdn1.clkads.com/script/1.0.18.js (22969 bytes) download

1275/294ecd010d971f74bb5151b8deac1bd80728 from cdn1.clkads.com/script/1.0.18.js (138 bytes) download


www.tube2file.com/rhlp/tube2lp.php benign
[nothing detected] (jsvar) www.tube2file.com/rhlp/tube2lp.php
     status: (referer=cdn.optimizely.com/js/25528774.js)saved 8346 bytes f63ab17a800fc3b3baef77c4f901aa161e23fcaf
     info: [script] cdn.optimizely.com/js/25528774.js
     info: [script] cdn.performersoft.com/media/videoperformer/vp1/jquery-1.4.2.min.js
     info: [script] cdn.performersoft.com/media/videoperformer/vp1/jquery.backstretch.js
     info: [script] cdn.performersoft.com/media/videoperformer/vp1/jquery.backstretch.min.js
     info: [img] www.tube2file.com/rhlp/./logo-nodl.png
     info: [img] seals.trustedverified.com/tube2file.com/small.png
     info: [img] seals.trustedverified.com/tube2file.com/small.png
     info: [img] seals.trustedverified.com/tube2file.com/small.png
     info: [img] cdn.performersoft.com/media/videoperformer/vp1/download-btn.png
     info: [decodingLevel=0] found JavaScript
     error: undefined variable $
     error: undefined function $.backstretch
     suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
     file: f63ab17a800fc3b3baef77c4f901aa161e23fcaf: 8346 bytes
     file: 55cff9b36f47817c8877986b358c63fada7e484c: 26018 bytes
     file: 153381c734ff22dad9f831ed094d3f496702021a: 26174 bytes
     file: ec6a301a16e066645548a5a3c733811790a249cd: 26366 bytes
     file: 10ebcb8e6321e64489eefbb70603049328e1deab: 26080 bytes
     file: fd504f542467768b3585e86754484008d22440fe: 26204 bytes
     file: a03996b1de06f45f0c75ca9892dd43bb019b8098: 8578 bytes
     file: 4d9bee4ab3a91a2b70945fcde627ddfd93449e9e: 8584 bytes
     file: 87277254ea05647f678123e8ebbc5072790ea379: 8793 bytes
     file: e53a3375428e8c202130e09bc8c2acaacca29fce: 8985 bytes
     file: d2f057cce8a5228743154c2773c6aa73ff7ae4b2: 8699 bytes
     file: 3c6d56d0d46df16c3182e807ad879f33e0c1357d: 8823 bytes

Decoded Files
f63a/b17a800fc3b3baef77c4f901aa161e23fcaf from www.tube2file.com/rhlp/tube2lp.php (8346 bytes, 816 hidden) download

55cf/f9b36f47817c8877986b358c63fada7e484c from www.tube2file.com/rhlp/tube2lp.php (26018 bytes, 109 hidden) download

1533/81c734ff22dad9f831ed094d3f496702021a from www.tube2file.com/rhlp/tube2lp.php ec6a/301a16e066645548a5a3c733811790a249cd from www.tube2file.com/rhlp/tube2lp.php 10eb/cb8e6321e64489eefbb70603049328e1deab from www.tube2file.com/rhlp/tube2lp.php fd50/4f542467768b3585e86754484008d22440fe from www.tube2file.com/rhlp/tube2lp.php a039/96b1de06f45f0c75ca9892dd43bb019b8098 from www.tube2file.com/rhlp/tube2lp.php 4d9b/ee4ab3a91a2b70945fcde627ddfd93449e9e from www.tube2file.com/rhlp/tube2lp.php 8727/7254ea05647f678123e8ebbc5072790ea379 from www.tube2file.com/rhlp/tube2lp.php e53a/3375428e8c202130e09bc8c2acaacca29fce from www.tube2file.com/rhlp/tube2lp.php d2f0/57cce8a5228743154c2773c6aa73ff7ae4b2 from www.tube2file.com/rhlp/tube2lp.php 3c6d/56d0d46df16c3182e807ad879f33e0c1357d from www.tube2file.com/rhlp/tube2lp.php

www.ibario.com/tools/popup-dialog.js benign
[nothing detected] (script) www.ibario.com/tools/popup-dialog.js
     status: (referer=clkads.com/adServe/directCampClick?tid=)saved 559 bytes ac83e4d6a032641db5697f3e14ac1d767ecc725a
     info: [decodingLevel=0] found JavaScript
     file: ac83e4d6a032641db5697f3e14ac1d767ecc725a: 559 bytes

Decoded Files
ac83/e4d6a032641db5697f3e14ac1d767ecc725a from www.ibario.com/tools/popup-dialog.js (559 bytes, 96 hidden) download


clkads.com/adServe/findAd?num= benign
[nothing detected] (jsvar) clkads.com/adServe/findAd?num=
     status: (referer=cdn1.clkads.com/script/1.0.18.js)saved 114 bytes a5893faa28ecd5d9cce462fad5852bb053eed68e
     info: [0] no JavaScript
     file: a5893faa28ecd5d9cce462fad5852bb053eed68e: 114 bytes

Decoded Files
a589/3faa28ecd5d9cce462fad5852bb053eed68e from clkads.com/adServe/findAd?num= (114 bytes) download


zoolagames.com/lp/ibar.php benign
[nothing detected] (jsvar) zoolagames.com/lp/ibar.php
     status: (referer=cdn.optimizely.com/js/25528774.js)saved 8936 bytes 803cb73f2c4f2e6c0deab3439f3172eb5234cfca
     info: [img] ibario.com/images/ibario-final-logo.png
     info: [img] zoolagames.com/images/100free.png
     info: [img] images.scanalert.com/meter/www.ibario.com/13.gif
     info: [img] zoolagames.com/images/spacer.gif
     info: [img] ibario.com/wp-content/uploads/2011/05/screenshot.jpg
     info: [img] zoolagames.com/images/greenbutton1.gif
     info: [iframe] www.facebook.com/plugins/likebox.php?id=134594759899826&width=292&connections=10&stream=false&header=true&height=287
     info: [img] ibario.com/images/ZGScreenshot.png
     info: [img] zoolagames.com/images/button.gif
     info: [img] zoolagames.com/lp/images/arrow.png
     info: [img] zoolagames.com/lp/images/small-close.png
     info: [img] live.spiapi.com/track/pixel?a=1985&id=30000&id=1&id=iBario
     info: [decodingLevel=0] found JavaScript
     error: undefined variable s
     info: [1] no JavaScript
     file: 803cb73f2c4f2e6c0deab3439f3172eb5234cfca: 8936 bytes
     file: f9e4048e7e87436e12343dbcd9d467a31f0c972e: 93 bytes

Decoded Files
803c/b73f2c4f2e6c0deab3439f3172eb5234cfca from zoolagames.com/lp/ibar.php (8936 bytes, 1396 hidden) download

f9e4/048e7e87436e12343dbcd9d467a31f0c972e from zoolagames.com/lp/ibar.php (93 bytes) download