JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link fb3050b6ab589e5053ff70095b40d1194ed3027f (Received 2013-01-29 17:40:19, http://adf.ly/DwB8R )

URLStatus
adf.ly/DwB8R saved 16581 bytes 327f12cb9592d4dc7856fb26c7da43cd2dd8c915

a.espncdn.com/combiner/c?js=jquery-1.7.1.js,plugins/json2.r3.js,plugins/teacrypt.js,plugins/jquery.metadata.js,plugins/jquery.bgiframe.r3.js,plugins/jquery.easing.1.3.js,plugins/jquery.hoverIntent.js,plugins/jquery.jcarousel.js,plugins/jquery.tinysort.r4. status: (referer=espn.go.com/new-york/nfl/story/_/id/8537814/rex-ryan-new-york-jets-coach-defends-play-calling-late-loss?source=twitterfeed&medium=twitter)

fls.doubleclick.net/activityi;src=1181183;type=espnc270;cat=espnn463;ord=1;num= status: (referer=espn.go.com/new-york/nfl/story/_/id/8537814/rex-ryan-new-york-jets-coach-defends-play-calling-late-loss?source=twitterfeed&medium=twitter)

adf.ly/ad/holder?f39e9c721572ad15aee707bc21c99707 status: (referer=adf.ly/DwB8R)

fls.doubleclick.net/activityi;src=1181183;type=espnc270;cat=espnn463;ord=1;num=1? status: (referer=espn.go.com/new-york/nfl/story/_/id/8537814/rex-ryan-new-york-jets-coach-defends-play-calling-late-loss?source=twitterfeed&medium=twitter)

js.adsonar.com/js/adsonar.js status: (referer=espn.go.com/new-york/nfl/story/_/id/8537814/rex-ryan-new-york-jets-coach-defends-play-calling-late-loss?source=twitterfeed&medium=twitter)

a.espncdn.com/combiner/c?v=20121129&js=community/echo/jquery-plugins.0.0.2.js,community/echo/auth.0.1.6.js,community/echo/backplane.0.0.0.js status: (referer=espn.go.com/new-york/nfl/story/_/id/8537814/rex-ryan-new-york-jets-coach-defends-play-calling-late-loss?source=twitterfeed&medium=twitter)

ad.Doubleclick.net/adj/ status: (referer=espn.go.com/new-york/nfl/story/_/id/8537814/rex-ryan-new-york-jets-coach-defends-play-calling-late-loss?source=twitterfeed&medium=twitter)

Warning: reading file /storagefiles/98ff//d424f780fd00865f53900273f2db8a937f1d failed

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js benign
[nothing detected] (script) ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js
     status: (referer=adf.ly/DwB8R)saved 93868 bytes 9eb9ac595e9b5544e2dc79fff7cd2d0b4b5ef71f
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [decodingLevel=0] found JavaScript
     error: undefined function q.getElementsByTagName
     error: undefined variable q
     info: [element] URL=ajax.googleapis.com/ajax/libs/jquery/1.7.1/undefined
     info: [1] no JavaScript
     file: 9eb9ac595e9b5544e2dc79fff7cd2d0b4b5ef71f: 93868 bytes
     file: d5dba94a76a67a54f2b98b16227da20414542fd9: 72 bytes

Decoded Files
9eb9/ac595e9b5544e2dc79fff7cd2d0b4b5ef71f from ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js (93868 bytes, 2 hidden) download

d5db/a94a76a67a54f2b98b16227da20414542fd9 from ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js (72 bytes) download


adf.ly/DwB8R benign
[nothing detected] adf.ly/DwB8R
     status: (referer=http:/www.ask.com/web?q=puppies)saved 16581 bytes 327f12cb9592d4dc7856fb26c7da43cd2dd8c915
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [meta refresh] URL=adf.ly/noscript.php?t=js
     info: [script] ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js
     info: [img] http:/cdn.adf.ly/static/image/facebook.png
     info: [iframe] adf.ly/ad/holder?f39e9c721572ad15aee707bc21c99707
     info: [iframe] espn.go.com/new-york/nfl/story/_/id/8537814/rex-ryan-new-york-jets-coach-defends-play-calling-late-loss?source=twitterfeed&medium=twitter
     info: [decodingLevel=0] found JavaScript
     error: line:20: SyntaxError: missing ) after condition:
          error: line:20: r(var ac in ai){if(ai[ac]!=Object.prototype[ac]){if(ac.toLowerCase()=="styleclass"){Z.setAttribute("class",ai[ac])}else{if(ac.toLowerCase()!="classid"){Z.setAttribute(ac,ai[ac])}}}}for(var ab in ag){if(ag[ab]!=Object.prototype[ab]&&ab.toLowerCase;()!="mov
          error: line:20: ......................................................................................................................................................................................................................................................^
     error: line:7: SyntaxError: XML tag name mismatch (expected meta):
          error: line:7: </noscript>
          error: line:7: ..........^
     file: 327f12cb9592d4dc7856fb26c7da43cd2dd8c915: 16581 bytes

Decoded Files
327f/12cb9592d4dc7856fb26c7da43cd2dd8c915 from adf.ly/DwB8R (16581 bytes, 789 hidden) download