JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link ff7957544e16616b27c0dcc4d9273241aeb0583d (Received 2013-01-04 07:34:27, localleaks.blogs.ru/ localleaks.blogs.ru/)

URLStatus
localleaks.blogs.ru/ saved 52774 bytes ef4c21acda52bf0595081b2a9c7d4f0e8dfcd194

1.cdn.blog.com/wp-includes/js/jquery/jquery.js?ver=1.4.4 status: (referer=localleaks.blogs.ru/)

1.cdn.blog.com/wp-includes/js/l10n.js?ver=20101110 status: (referer=localleaks.blogs.ru/)

1.cdn.blog.com/wp-includes/js/admin-bar.js?ver=20110131 status: (referer=localleaks.blogs.ru/)

s.imgur.com/min/js?1353536110 status: (referer=imgur.com/D2UuS)

1.cdn.blog.com/wp-content/mu-plugins/blogcom-oauth-comments/js/base.js?ver=3.2-bleeding status: (referer=localleaks.blogs.ru/)

1.cdn.blog.com/wp-content/mu-plugins/blogcom-oauth-comments/js/facebook.js?ver=3.2-bleeding status: (referer=localleaks.blogs.ru/)

browserid.org/include.js?ver=current status: (referer=localleaks.blogs.ru/)

player.vimeo.com/video/56640382 status: (referer=localleaks.blogs.ru/)

www.youtube.com/embed/Ks3bnbAd4II status: (referer=localleaks.blogs.ru/)

1.cdn.blog.com/wp-content/mu-plugins/blogcom-oauth-comments/js/twitter.js?ver=3.2-bleeding status: (referer=localleaks.blogs.ru/)

s.imgur.com/min/js?1355271801 status: (referer=imgur.com/D2UuS)

edge.quantserve.com/quant.js status: (referer=localleaks.blogs.ru/)

1.cdn.blog.com/wp-includes/js/swfobject.js?ver=2.2 status: (referer=localleaks.blogs.ru/)

imgur.com/undefined/insight.torbit.com/v1/insight.min.js status: (referer=imgur.com/D2UuS)

static.fmpub.net/site/imgur status: (referer=imgur.com/D2UuS)

rutube.ru/static/js/libs/require/require.js status: (referer=rutube.ru/embed/6062144)

optimized-by.rubiconproject.com/a/8526/14505/30299-15.html?4095 status: (referer=imgur.com/D2UuS)

tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js?pc=8526/13802 status: (referer=imgur.com/D2UuS)

Warning: reading file /storagefiles/68d8//87265658004fc5703cc9252cc57a7f72e054 failed
Warning: reading file /storagefiles/62e7//cd3cb15d066bcbe97d2bcb003f7e856df846 failed
Warning: reading file /storagefiles/ab2f//dce181aeb50e40001c448079dc12245054a8 failed
Warning: reading file /storagefiles/4d41//0cd426c74168845009aedfdbc7fcbcf0e755 failed

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
localleaks.blogs.ru/ benign
[nothing detected] localleaks.blogs.ru/
     status: (referer=localleaks.blogs.ru/ )saved 52774 bytes ef4c21acda52bf0595081b2a9c7d4f0e8dfcd194
     info: [javascript variable] URL=imgur.com/D2UuS
     info: [script] 1.cdn.blog.com/wp-content/themes/twentyeleven/js/html5.js
     info: [script] 1.cdn.blog.com/wp-includes/js/l10n.js?ver=20101110
     info: [script] 1.cdn.blog.com/wp-includes/js/jquery/jquery.js?ver=1.4.4
     info: [script] ads.blog.com/www/delivery/spcjs.php?id=1&block=1&target=_blank&ver=3.2-bleeding
     info: [script] 1.cdn.blog.com/wp-content/mu-plugins/nextgen-gallery/shutter/shutter-reloaded.js?ver=1.3.0
     info: [script] 1.cdn.blog.com/wp-includes/js/swfobject.js?ver=2.2
     info: [script] 1.cdn.blog.com/wp-content/mu-plugins/nextgen-gallery/js/ngg.js?ver=2.0
     info: [script] 1.cdn.blog.com/wp-content/mu-plugins/blogcom-oauth-comments/js/base.js?ver=3.2-bleeding
     info: [script] 1.cdn.blog.com/wp-content/mu-plugins/blogcom-oauth-comments/js/facebook.js?ver=3.2-bleeding
     info: [script] 1.cdn.blog.com/wp-content/mu-plugins/blogcom-oauth-comments/js/twitter.js?ver=3.2-bleeding
     info: [script] 1.cdn.blog.com/wp-content/mu-plugins/blogcom-oauth-comments/js/browserid.js?ver=3.2-bleeding
     info: [script] browserid.org/include.js?ver=current
     info: [script] 1.cdn.blog.com/wp-content/mu-plugins/blogcom-oauth-comments/js/google.js?ver=3.2-bleeding
     info: [script] 1.cdn.blog.com/wp-content/mu-plugins/audio-player/assets/audio-player.js?ver=20100116115547
     info: [img] localleaks.blogs.ru/files/2012/12/cropped-leakslogo1.jpg
     info: [img] localleaks.blogs.ru/wp-content/blogs.dir/00/08/35/18/8351843/files/cache/1__500x140_1473163342.jpg
     info: [iframe] rutube.ru/embed/6062144
     info: [img] localleaks.blogs.ru/wp-content/blogs.dir/00/08/35/18/8351843/files/the-steubenville-files/james.jpg
     info: [img] localleaks.blogs.ru/wp-content/blogs.dir/00/08/35/18/8351843/files/the-steubenville-files/schoolbathroomsproof.png
     info: [img] localleaks.blogs.ru/wp-content/blogs.dir/00/08/35/18/8351843/files/the-steubenville-files/sheriffabdalla.jpg
     info: [iframe] www.youtube.com/embed/Ks3bnbAd4II
     info: [img] localleaks.blogs.ru/wp-content/blogs.dir/00/08/35/18/8351843/files/the-steubenville-files/janehanlin.jpg
     info: [img] localleaks.blogs.ru/wp-content/blogs.dir/00/08/35/18/8351843/files/the-steubenville-files/coachreno.jpg
     info: [img] localleaks.blogs.ru/wp-content/blogs.dir/00/08/35/18/8351843/files/the-steubenville-files/spotbar.gif
     info: [img] localleaks.blogs.ru/wp-content/blogs.dir/00/08/35/18/8351843/files/the-steubenville-files/rapecrew.jpg
     info: [iframe] player.vimeo.com/video/56640382
     info: [img] localleaks.blogs.ru/wp-content/blogs.dir/00/08/35/18/8351843/files/the-steubenville-files/nodianosrifle.png
     info: [img] localleaks.blogs.ru/wp-content/blogs.dir/00/08/35/18/8351843/files/the-steubenville-files/cody-sees-it-sloppy.png
     info: [img] localleaks.blogs.ru/wp-content/blogs.dir/00/08/35/18/8351843/files/the-steubenville-files/codys-sympathy-for-whores.png
     info: [img] localleaks.blogs.ru/wp-content/blogs.dir/00/08/35/18/8351843/files/the-steubenville-files/thumbs/bedvpn.jpg
     info: [img] localleaks.blogs.ru/wp-content/blogs.dir/00/08/35/18/8351843/files/the-steubenville-files/172-dec-01-00-26.jpg
     info: [img] localleaks.blogs.ru/wp-content/blogs.dir/00/08/35/18/8351843/files/the-steubenville-files/thumbs/santoro.png
     info: [script] 1.cdn.blog.com/wp-includes/js/admin-bar.js?ver=20110131
     info: [script] edge.quantserve.com/quant.js
     info: [img] pixel.quantserve.com/pixel/p-b3DDIGtNmjMZA.gif
     info: [decodingLevel=0] found JavaScript
     error: undefined variable AudioPlayer
     error: undefined function AudioPlayer.setup
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE html>
          error: line:3: ..............^
     file: ef4c21acda52bf0595081b2a9c7d4f0e8dfcd194: 52774 bytes

Decoded Files
ef4c/21acda52bf0595081b2a9c7d4f0e8dfcd194 from localleaks.blogs.ru/ (52774 bytes, 1251 hidden) download


1.cdn.blog.com/wp-content/mu-plugins/blogcom-oauth-comments/js/google.js?ver=3.2-bleeding benign
[nothing detected] (script) 1.cdn.blog.com/wp-content/mu-plugins/blogcom-oauth-comments/js/google.js?ver=3.2-bleeding
     status: (referer=localleaks.blogs.ru/)saved 2466 bytes 273dd28ec28f5b19f3ddc0d413d0585c5300cc02
     file: 273dd28ec28f5b19f3ddc0d413d0585c5300cc02: 2466 bytes

Decoded Files
273d/d28ec28f5b19f3ddc0d413d0585c5300cc02 from 1.cdn.blog.com/wp-content/mu-plugins/blogcom-oauth-comments/js/google.js?ver=3.2-bleeding (2466 bytes, 321 hidden) download


1.cdn.blog.com/wp-content/themes/twentyeleven/js/html5.js benign
[nothing detected] (script) 1.cdn.blog.com/wp-content/themes/twentyeleven/js/html5.js
     status: (referer=localleaks.blogs.ru/)saved 2002 bytes e6569597690e642c81c856405d121eb08eed352b
     file: e6569597690e642c81c856405d121eb08eed352b: 2002 bytes

Decoded Files
e656/9597690e642c81c856405d121eb08eed352b from 1.cdn.blog.com/wp-content/themes/twentyeleven/js/html5.js (2002 bytes, 2 hidden) download


ads.blog.com/www/delivery/spcjs.php?id=1&#038;block=1&#038;target=_blank&#038;ver=3.2-bleeding benign
[nothing detected] (script) ads.blog.com/www/delivery/spcjs.php?id=1&#038;block=1&#038;target=_blank&#038;ver=3.2-bleeding
     status: (referer=localleaks.blogs.ru/)saved 2232 bytes 14b72e8854f65f719e508b70c9ee6dbd0a17df6a
     file: 14b72e8854f65f719e508b70c9ee6dbd0a17df6a: 2232 bytes

Decoded Files
14b7/2e8854f65f719e508b70c9ee6dbd0a17df6a from ads.blog.com/www/delivery/spcjs.php?id=1&#038;block=1&#038;target=_blank&#038;ver=3.2-bleeding (2232 bytes, 356 hidden) download


1.cdn.blog.com/wp-content/mu-plugins/nextgen-gallery/shutter/shutter-reloaded.js?ver=1.3.0 benign
[nothing detected] (script) 1.cdn.blog.com/wp-content/mu-plugins/nextgen-gallery/shutter/shutter-reloaded.js?ver=1.3.0
     status: (referer=localleaks.blogs.ru/)saved 9028 bytes 69dfdaf06dceafadb06b7bf01a53f4e7fd633bb8
     info: [img] 1.cdn.blog.com/wp-content/mu-plugins/nextgen-gallery/shutter/
     file: 69dfdaf06dceafadb06b7bf01a53f4e7fd633bb8: 9028 bytes

Decoded Files
69df/daf06dceafadb06b7bf01a53f4e7fd633bb8 from 1.cdn.blog.com/wp-content/mu-plugins/nextgen-gallery/shutter/shutter-reloaded.js?ver=1.3.0 (9028 bytes, 738 hidden) download


1.cdn.blog.com/wp-content/mu-plugins/blogcom-oauth-comments/js/browserid.js?ver=3.2-bleeding benign
[nothing detected] (script) 1.cdn.blog.com/wp-content/mu-plugins/blogcom-oauth-comments/js/browserid.js?ver=3.2-bleeding
     status: (referer=localleaks.blogs.ru/)saved 755 bytes f8d70a040f7bb513106af8effaa767342db84fea
     info: [decodingLevel=0] found JavaScript
     error: undefined variable jQuery
     error: undefined function jQuery
     suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
     file: f8d70a040f7bb513106af8effaa767342db84fea: 755 bytes
     file: 5e7da87ef7b3469cec0982a2cb2c7909d28a7e25: 1163 bytes
     file: 68d887265658004fc5703cc9252cc57a7f72e054: 1308 bytes
     file: 62e7cd3cb15d066bcbe97d2bcb003f7e856df846: 1500 bytes
     file: ab2fdce181aeb50e40001c448079dc12245054a8: 1214 bytes
     file: 4d410cd426c74168845009aedfdbc7fcbcf0e755: 1338 bytes

Decoded Files
f8d7/0a040f7bb513106af8effaa767342db84fea from 1.cdn.blog.com/wp-content/mu-plugins/blogcom-oauth-comments/js/browserid.js?ver=3.2-bleeding (755 bytes, 110 hidden) download

5e7d/a87ef7b3469cec0982a2cb2c7909d28a7e25 from 1.cdn.blog.com/wp-content/mu-plugins/blogcom-oauth-comments/js/browserid.js?ver=3.2-bleeding (1163 bytes, 110 hidden) download

68d8/87265658004fc5703cc9252cc57a7f72e054 from 1.cdn.blog.com/wp-content/mu-plugins/blogcom-oauth-comments/js/browserid.js?ver=3.2-bleeding 62e7/cd3cb15d066bcbe97d2bcb003f7e856df846 from 1.cdn.blog.com/wp-content/mu-plugins/blogcom-oauth-comments/js/browserid.js?ver=3.2-bleeding ab2f/dce181aeb50e40001c448079dc12245054a8 from 1.cdn.blog.com/wp-content/mu-plugins/blogcom-oauth-comments/js/browserid.js?ver=3.2-bleeding 4d41/0cd426c74168845009aedfdbc7fcbcf0e755 from 1.cdn.blog.com/wp-content/mu-plugins/blogcom-oauth-comments/js/browserid.js?ver=3.2-bleeding

imgur.com/D2UuS benign
[nothing detected] (jsvar) imgur.com/D2UuS
     status: (referer=localleaks.blogs.ru/)saved 23630 bytes b2167fea717b56f42c78de53d38c0d928a1d6c6e
     info: [img] i.imgur.com/D2UuS.jpg
     info: [img] i.imgur.com/NklLbb.jpg
     info: [img] i.imgur.com/xFnm4b.jpg
     info: [img] i.imgur.com/o9wZ9b.jpg
     info: [img] i.imgur.com/4aZ1Sb.jpg
     info: [img] i.imgur.com/BfMt7b.jpg
     info: [img] i.imgur.com/EhWZNb.jpg
     info: [iframe] optimized-by.rubiconproject.com/a/8526/14505/30299-15.html?4095
     info: [script] s.imgur.com/min/js?1355271801
     info: [script] s.imgur.com/min/js?1353536110
     info: [img] pixel.quantserve.com/pixel/p-f8oruOqDFlMeI.gif
     info: [script] tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js?pc=8526/13802
     info: [script] static.fmpub.net/site/imgur
     info: [img] ad.retargeter.com/seg?add=517165&t=2
     info: [decodingLevel=0] found JavaScript
     error: undefined variable b
     info: [element] URL=imgur.com/undefined/insight.torbit.com/v1/insight.min.js
     info: [1] no JavaScript
     file: b2167fea717b56f42c78de53d38c0d928a1d6c6e: 23630 bytes
     file: 278bb32e802781687b963f2a1d8b5ee6606543a3: 113 bytes

Decoded Files
b216/7fea717b56f42c78de53d38c0d928a1d6c6e from imgur.com/D2UuS (23630 bytes, 6509 hidden) download

278b/b32e802781687b963f2a1d8b5ee6606543a3 from imgur.com/D2UuS (113 bytes) download


rutube.ru/embed/6062144 benign
[nothing detected] (iframe) rutube.ru/embed/6062144
     status: (referer=localleaks.blogs.ru/)saved 503 bytes 1c45f96ce541002bd9a744bd0544f00dcfbe55c1
     info: [script] rutube.ru/static/js/libs/require/require.js
     info: [decodingLevel=0] found JavaScript
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE html >
          error: line:3: ...............^
     file: 1c45f96ce541002bd9a744bd0544f00dcfbe55c1: 503 bytes

Decoded Files
1c45/f96ce541002bd9a744bd0544f00dcfbe55c1 from rutube.ru/embed/6062144 (503 bytes, 114 hidden) download


1.cdn.blog.com/wp-content/mu-plugins/nextgen-gallery/js/ngg.js?ver=2.0 benign
[nothing detected] (script) 1.cdn.blog.com/wp-content/mu-plugins/nextgen-gallery/js/ngg.js?ver=2.0
     status: (referer=localleaks.blogs.ru/)saved 5664 bytes 12e398c0dd8a3200030fcbf552617da9b7ec8138
     info: [decodingLevel=0] found JavaScript
     error: undefined variable jQuery
     error: undefined function jQuery
     file: 12e398c0dd8a3200030fcbf552617da9b7ec8138: 5664 bytes

Decoded Files
12e3/98c0dd8a3200030fcbf552617da9b7ec8138 from 1.cdn.blog.com/wp-content/mu-plugins/nextgen-gallery/js/ngg.js?ver=2.0 (5664 bytes, 718 hidden) download


1.cdn.blog.com/wp-content/mu-plugins/audio-player/assets/audio-player.js?ver=20100116115547 benign
[nothing detected] (script) 1.cdn.blog.com/wp-content/mu-plugins/audio-player/assets/audio-player.js?ver=20100116115547
     status: (referer=localleaks.blogs.ru/)saved 11757 bytes 0e052695550e939119592ff8e40651edab725431
     info: [decodingLevel=0] found JavaScript
     info: DecodedMsg detected /info.ActiveXObject ShockwaveFlash.ShockwaveFlash
     info: [1] no JavaScript
     file: 0e052695550e939119592ff8e40651edab725431: 11757 bytes
     file: 966691673b5a10fbb8dc040fd56f9ef2ffdfc5b4: 53 bytes

Decoded Files
0e05/2695550e939119592ff8e40651edab725431 from 1.cdn.blog.com/wp-content/mu-plugins/audio-player/assets/audio-player.js?ver=20100116115547 (11757 bytes, 2 hidden) download

9666/91673b5a10fbb8dc040fd56f9ef2ffdfc5b4 from 1.cdn.blog.com/wp-content/mu-plugins/audio-player/assets/audio-player.js?ver=20100116115547 (53 bytes) download