JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link f158ca1722108bedb54e34045408fbd11f8e448b (Received 2012-09-20 07:46:47, http://cdn1.clkads.com/script/tbcore_1.0.18.js )

URLStatus
cdn1.clkads.com/script/1.0.18.js saved 22969 bytes dc38596a3f7122b33c8af330e891831964c4673e

videoconverter.softango.com/test-ft/ status: (referer=cdn.optimizely.com/js/25528774.js)

go.tvnoop.com/lp/rh/prpl/index2.php status: (referer=cdn.optimizely.com/js/25528774.js)

success.softango.com/28378/vindex4.html status: (referer=cdn.optimizely.com/js/25528774.js)

zoolagames.com/lp/tst/index.html status: (referer=cdn.optimizely.com/js/25528774.js)

www.thevideoperformer.com/downloadmanager/dm1.php status: (referer=cdn.optimizely.com/js/25528774.js)

thevideoperformer.com/lp/index-wok.php status: (referer=cdn.optimizely.com/js/25528774.js)

zoolagames.com/lp/tst/jquest/ status: (referer=cdn.optimizely.com/js/25528774.js)

games.zoolagames.com/ status: (referer=cdn.optimizely.com/js/25528774.js)

go.fasterbetterpc.com/pcperformer/tst/pcperformer-rh-rh-st2-free-en5.php status: (referer=cdn.optimizely.com/js/25528774.js)

www.appround.biz/bestcodecspack/v3/v4.php status: (referer=cdn.optimizely.com/js/25528774.js)

go.zoolagames.com/lp/ibr/frg/ibr-frg-7wonders-en.php status: (referer=cdn.optimizely.com/js/25528774.js)

zoolagames.com/lp/tst/farmer/ status: (referer=cdn.optimizely.com/js/25528774.js)

zoolagames.com/lp/rh/z3/rh-z3-free-en.php status: (referer=cdn.optimizely.com/js/25528774.js)

go.performersoft.com/templates/driverperformer/dr2/ status: (referer=cdn.optimizely.com/js/25528774.js)

www.thevideoperformer.com/downloadmanager/mini2/dm2.php status: (referer=cdn.optimizely.com/js/25528774.js)

go.fasterbetterpc.com/pcperformer/tst/pcperformer-rh-rh-st2-free-en0.php status: (referer=cdn.optimizely.com/js/25528774.js)

vax9.com/lp/tst/table/index.html status: (referer=cdn.optimizely.com/js/25528774.js)

thevideoperformer.com/downloadmanager/lp002.php status: (referer=cdn.optimizely.com/js/25528774.js)

videoconverter.softango.com/index2.html status: (referer=cdn.optimizely.com/js/25528774.js)

www.pdfperformer.net/pdfperformer/index2.php status: (referer=cdn.optimizely.com/js/25528774.js)

www.appround.us/pcperformer/tst/rh-st2-tst.html status: (referer=cdn.optimizely.com/js/25528774.js)

success.softango.com/28378/vindex.html status: (referer=cdn.optimizely.com/js/25528774.js)

zoolagames.com/lp/ibr/z4/index.php status: (referer=cdn.optimizely.com/js/25528774.js)

success.softango.com/28378/vindex3.html status: (referer=cdn.optimizely.com/js/25528774.js)

driverperformer.fr/fr/pilotes.php status: (referer=cdn.optimizely.com/js/25528774.js)

cdn.performersoft.com/media/videoperformer/vp1/jquery.backstretch.js status: (referer=www.tube2file.com/rhlp/tube2lp.php)

performersoft.com/converters/vconverter/pcperformer.php status: (referer=cdn.optimizely.com/js/25528774.js)

cdn.performersoft.com/media/videoperformer/vp1/jquery-1.4.2.min.js status: (referer=www.tube2file.com/rhlp/tube2lp.php)

zoolagames.com/lp/zoola15412/index4.php status: (referer=cdn.optimizely.com/js/25528774.js)

www.thevideoperformer.com/downloadmanager/lp/index.php status: (referer=cdn.optimizely.com/js/25528774.js)

cdn.performersoft.com/media/videoperformer/vp1/jquery.backstretch.min.js status: (referer=www.tube2file.com/rhlp/tube2lp.php)

performersoft.com/dr2412.php status: (referer=cdn.optimizely.com/js/25528774.js)

audioconverter.softango.com/ status: (referer=cdn.optimizely.com/js/25528774.js)

zoolagames.com/lp/zoola15412/index3.php status: (referer=cdn.optimizely.com/js/25528774.js)

go.tvnoop.com/lp.php status: (referer=cdn.optimizely.com/js/25528774.js)

zoolagames.com/lp/zoola15412/index5.php status: (referer=cdn.optimizely.com/js/25528774.js)

www.facebook.com/plugins/likebox.php?id=134594759899826&width=292&connections=10&stream=false&header=true&height=287 status: (referer=zoolagames.com/lp/ibar.php)

go.performersoft.com/videoperformer/rh/rh/vp3/multi/videoperformer-rh-rh-vp3-multi-en.php status: (referer=cdn.optimizely.com/js/25528774.js)

success.softango.com/t-pages/1/landing-page.html status: (referer=cdn.optimizely.com/js/25528774.js)

appround.us/bestcodecspack/rh/lptst.php status: (referer=cdn.optimizely.com/js/25528774.js)

zoolagames.com/lp/zoola15412/index.php status: (referer=cdn.optimizely.com/js/25528774.js)

zoolagames.com/ status: (referer=cdn.optimizely.com/js/25528774.js)

Warning: reading file /storagefiles/1533//81c734ff22dad9f831ed094d3f496702021a failed
Warning: reading file /storagefiles/ec6a//301a16e066645548a5a3c733811790a249cd failed
Warning: reading file /storagefiles/10eb//cb8e6321e64489eefbb70603049328e1deab failed
Warning: reading file /storagefiles/fd50//4f542467768b3585e86754484008d22440fe failed
Warning: reading file /storagefiles/a039//96b1de06f45f0c75ca9892dd43bb019b8098 failed
Warning: reading file /storagefiles/4d9b//ee4ab3a91a2b70945fcde627ddfd93449e9e failed
Warning: reading file /storagefiles/8727//7254ea05647f678123e8ebbc5072790ea379 failed
Warning: reading file /storagefiles/e53a//3375428e8c202130e09bc8c2acaacca29fce failed
Warning: reading file /storagefiles/d2f0//57cce8a5228743154c2773c6aa73ff7ae4b2 failed
Warning: reading file /storagefiles/3c6d//56d0d46df16c3182e807ad879f33e0c1357d failed

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
clkads.com/adServe/coupons?cid= benign
[nothing detected] (setAttribute src) clkads.com/adServe/coupons?cid=
     status: (referer=cdn1.clkads.com/script/1.0.18.js)saved 16 bytes 7ac28b55fb76b987f23a6b0c7f6ff9beb1f98ca7
     info: [0] no JavaScript
     file: 7ac28b55fb76b987f23a6b0c7f6ff9beb1f98ca7: 16 bytes

Decoded Files
7ac2/8b55fb76b987f23a6b0c7f6ff9beb1f98ca7 from clkads.com/adServe/coupons?cid= (16 bytes) download


cdn.fasterbetterpc.com/media/ie9dl/ie9dl.js benign
[nothing detected] (script) cdn.fasterbetterpc.com/media/ie9dl/ie9dl.js
     status: (referer=clkads.com/adServe/directCampClick?tid=)saved 1295 bytes 8d290e965a66acafc512444e57475900ca1b0b35
     info: [decodingLevel=0] found JavaScript
     file: 8d290e965a66acafc512444e57475900ca1b0b35: 1295 bytes

Decoded Files
8d29/0e965a66acafc512444e57475900ca1b0b35 from cdn.fasterbetterpc.com/media/ie9dl/ie9dl.js (1295 bytes, 109 hidden) download


cdn.optimizely.com/js/25528774.js benign
[nothing detected] (script) cdn.optimizely.com/js/25528774.js
     status: (referer=clkads.com/adServe/directCampClick?tid=)saved 253366 bytes b88a91530608720ffb0e181f3c0f17b53844b2e8
     info: [javascript variable] URL=go.zoolagames.com/lp/ibr/frg/ibr-frg-7wonders-en.php
     info: [javascript variable] URL=zoolagames.com/lp/zoola15412/index5.php
     info: [javascript variable] URL=driverperformer.fr/fr/pilotes.php
     info: [javascript variable] URL=videoconverter.softango.com/test-ft/
     info: [javascript variable] URL=success.softango.com/t-pages/1/landing-page.html
     info: [javascript variable] URL=zoolagames.com/lp/ibar.php
     info: [javascript variable] URL=zoolagames.com/lp/zoola15412/index4.php
     info: [javascript variable] URL=thevideoperformer.com/lp/index-wok.php
     info: [javascript variable] URL=www.thevideoperformer.com/downloadmanager/lp/index.php
     info: [javascript variable] URL=zoolagames.com/lp/rh/z3/rh-z3-free-en.php
     info: [javascript variable] URL=zoolagames.com/lp/zoola15412/index.php
     info: [javascript variable] URL=go.tvnoop.com/lp/rh/prpl/index2.php
     info: [javascript variable] URL=www.appround.us/pcperformer/tst/rh-st2-tst.html
     info: [javascript variable] URL=thevideoperformer.com/downloadmanager/lp002.php
     info: [javascript variable] URL=zoolagames.com/lp/zoola15412/index3.php
     info: [javascript variable] URL=audioconverter.softango.com/
     info: [javascript variable] URL=www.thevideoperformer.com/downloadmanager/mini2/dm2.php
     info: [javascript variable] URL=success.softango.com/28378/vindex.html
     info: [javascript variable] URL=go.performersoft.com/templates/driverperformer/dr2/
     info: [javascript variable] URL=success.softango.com/28378/vindex1.html
     info: [javascript variable] URL=success.softango.com/28378/vindex3.html