JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 21485d81b0d4dc0683939e8b954378e364c7f1d1 (Received 2018-04-17 03:44:28, https://pastebin.com/S37NAC4n )

URLStatus
pastebin.com/S37NAC4n saved 14345 bytes 1de2ce5c0787a277364765078b1dad0d33d48f2b

tags.expo9.exponential.com/tags/Pastebincom/Safe/about:blank status: (referer=tags.expo9.exponential.com/tags/Pastebincom/Safe/tags.js)

pastebin.com/nein/safe.php status: (referer=pastebin.com/S37NAC4n)

tags.expo9.exponential.com/tags/Pastebincom/SnackbarSafe/about:blank status: (referer=tags.expo9.exponential.com/tags/Pastebincom/SnackbarSafe/tags.js)

static.criteo.net/js/ld/publishertag.js status: (referer=pastebin.com/nein/safe.php)

srv.carbonads.net/ads/.json?segment=placement:&callback=_go status: (referer=cdn.carbonads.com/carbon.js?zoneid=1673&serve=C6AILKT&placement=pastebincom-fixed)

a.tribalfusion.com/real status: (referer=tags.expo9.exponential.com/tags/Pastebincom/Safe/tags.js)

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
pastebin.com/js/pastebin.min.v2.js benign
[nothing detected] (script) pastebin.com/js/pastebin.min.v2.js
     status: (referer=pastebin.com/S37NAC4n)saved 36312 bytes f0e6c4cecceb6ad646b7d729832ab557b1cef5e6
     info: [decodingLevel=0] found JavaScript
     error: undefined variable jQuery
     error: undefined function jQuery
     file: f0e6c4cecceb6ad646b7d729832ab557b1cef5e6: 36312 bytes

Decoded Files
f0e6/c4cecceb6ad646b7d729832ab557b1cef5e6 from pastebin.com/js/pastebin.min.v2.js (36312 bytes) download


tags.expo9.exponential.com/tags/Pastebincom/Safe/tags.js benign
[nothing detected] (script) tags.expo9.exponential.com/tags/Pastebincom/Safe/tags.js
     status: (referer=pastebin.com/S37NAC4n)saved 7393 bytes 4fb70f2ae0e9309d0d7e53bad1eb9b517124bf6f
     info: [iframe] tags.expo9.exponential.com/tags/Pastebincom/Safe/about:blank
     info: [decodingLevel=0] found JavaScript
     info: [script] a.tribalfusion.com/real
     info: [decodingLevel=1] found JavaScript
     file: 4fb70f2ae0e9309d0d7e53bad1eb9b517124bf6f: 7393 bytes
     file: 1e4cbcef011146e5e722ff467fd94b29c68ec39c: 102 bytes

Decoded Files
4fb7/0f2ae0e9309d0d7e53bad1eb9b517124bf6f from tags.expo9.exponential.com/tags/Pastebincom/Safe/tags.js (7393 bytes, 1352 hidden) download

1e4c/bcef011146e5e722ff467fd94b29c68ec39c from tags.expo9.exponential.com/tags/Pastebincom/Safe/tags.js (102 bytes) download


pastebin.com/S37NAC4n benign
[nothing detected] pastebin.com/S37NAC4n
     status: (referer=http:/www.ask.com/web?q=puppies)saved 14345 bytes 1de2ce5c0787a277364765078b1dad0d33d48f2b
     info: [script] pastebin.com/js/jquery.min.js
     info: [script] pastebin.com/js/pastebin.min.v2.js
     info: [script] pub.freestar.io/pastebin/pubfig.min.js
     info: [img] pastebin.com/i/guest.png
     info: [img] pastebin.com/i/t.gif
     info: [script] tags.expo9.exponential.com/tags/Pastebincom/Safe/tags.js
     info: [script] cdn.carbonads.com/carbon.js?zoneid=1673&serve=C6AILKT&placement=pastebincom-fixed
     info: [script] tags.expo9.exponential.com/tags/Pastebincom/SnackbarSafe/tags.js
     info: [script] cdn.fancybar.net/ac/fancybar.js?zoneid=1502&serve=C6ADVKE&placement=pastebin
     info: [iframe] pastebin.com/nein/safe.php
     info: [iframe] pastebin.com/nein/safe.php
     info: [iframe] pastebin.com/nein/safe.php
     info: [decodingLevel=0] found JavaScript
     error: line:85: SyntaxError: missing ) after argument list:
          error: line:85: owtransparency='true' width='300' height='250' style='width: 300px; height: 250px;'></iframe></center>"), $("#abrpm2").html("<iframe src="/nein/safe.php" id="monkey" marginwidth="0" align="center" marginheight="0" hspace="0" vspace="0" framebor
          error: line:85: ...................................................................................................................................................................^
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE HTML>
          error: line:3: ..............^
     file: 1de2ce5c0787a277364765078b1dad0d33d48f2b: 14345 bytes

Decoded Files
1de2/ce5c0787a277364765078b1dad0d33d48f2b from pastebin.com/S37NAC4n (14345 bytes, 1080 hidden) download


pub.freestar.io/pastebin/pubfig.min.js benign
[nothing detected] (script) pub.freestar.io/pastebin/pubfig.min.js
     status: (referer=pastebin.com/S37NAC4n)saved 127 bytes 6cf22a7f474695a7b02c4f8e6bbe35b2441c8eb2
     info: [0] no JavaScript
     file: 6cf22a7f474695a7b02c4f8e6bbe35b2441c8eb2: 127 bytes

Decoded Files
6cf2/2a7f474695a7b02c4f8e6bbe35b2441c8eb2 from pub.freestar.io/pastebin/pubfig.min.js (127 bytes) download


pastebin.com/nein/safe.php benign
[nothing detected] (iframe) pastebin.com/nein/safe.php
     status: (referer=pastebin.com/S37NAC4n)saved 1546 bytes cb302cefae5705ec4fc75d92aa25aea33646e32c
     info: [script] static.criteo.net/js/ld/publishertag.js
     info: [decodingLevel=0] found JavaScript
     error: undefined variable Criteo
     error: undefined function Criteo.DisplayAcceptableAdIfAdblocked
     info: [decodingLevel=1] found JavaScript
     suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
     file: cb302cefae5705ec4fc75d92aa25aea33646e32c: 1546 bytes
     file: 1a0f0fbf08d59a212f2401158b94ddc9bcbad845: 401 bytes
     file: 0dc3eef7a70f0502f3c651300090fb94c059e887: 750 bytes
     file: b472b56e483b9652f2dfa8eff8c298efc43057f6: 874 bytes

Decoded Files
cb30/2cefae5705ec4fc75d92aa25aea33646e32c from pastebin.com/nein/safe.php (1546 bytes, 119 hidden) download

1a0f/0fbf08d59a212f2401158b94ddc9bcbad845 from pastebin.com/nein/safe.php (401 bytes, 70 hidden) download

0dc3/eef7a70f0502f3c651300090fb94c059e887 from pastebin.com/nein/safe.php (750 bytes, 70 hidden) download

b472/b56e483b9652f2dfa8eff8c298efc43057f6 from pastebin.com/nein/safe.php (874 bytes, 70 hidden) download


pastebin.com/nein/safe.php benign
[nothing detected] (iframe) pastebin.com/nein/safe.php
     status: (referer=pastebin.com/S37NAC4n)saved 1556 bytes 4b82b65ddeeaff45a56624b614d96f11b3b99e6c
     info: [script] static.criteo.net/js/ld/publishertag.js
     info: [decodingLevel=0] found JavaScript
     error: undefined variable Criteo
     error: undefined function Criteo.DisplayAcceptableAdIfAdblocked
     info: [decodingLevel=1] found JavaScript
     file: 4b82b65ddeeaff45a56624b614d96f11b3b99e6c: 1556 bytes
     file: 1a0f0fbf08d59a212f2401158b94ddc9bcbad845: 401 bytes

Decoded Files
4b82/b65ddeeaff45a56624b614d96f11b3b99e6c from pastebin.com/nein/safe.php (1556 bytes, 130 hidden) download

1a0f/0fbf08d59a212f2401158b94ddc9bcbad845 from pastebin.com/nein/safe.php (401 bytes, 70 hidden) download


cdn.carbonads.com/carbon.js?zoneid=1673&serve=C6AILKT&placement=pastebincom-fixed benign
[nothing detected] (script) cdn.carbonads.com/carbon.js?zoneid=1673&serve=C6AILKT&placement=pastebincom-fixed
     status: (referer=pastebin.com/S37NAC4n)saved 7101 bytes 6005cd80a115a193999cb51f78b0d843ac2b6a4e
     info: [img] cdn.carbonads.com/
     info: [decodingLevel=0] found JavaScript
     error: undefined variable document.getElementsByTagName("head")[0]
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var document.getElementsByTagName("head")[0] = 1;
          error: line:1: ....^
     info: [element] URL=srv.carbonads.net/ads/.json?segment=placement:&callback=_go
     info: [1] no JavaScript
     file: 6005cd80a115a193999cb51f78b0d843ac2b6a4e: 7101 bytes
     file: d5da1f26c8cde0c0351332fcec2c38daed319c57: 137 bytes

Decoded Files
6005/cd80a115a193999cb51f78b0d843ac2b6a4e from cdn.carbonads.com/carbon.js?zoneid=1673&serve=C6AILKT&placement=pastebincom-fixed (7101 bytes) download

d5da/1f26c8cde0c0351332fcec2c38daed319c57 from cdn.carbonads.com/carbon.js?zoneid=1673&serve=C6AILKT&placement=pastebincom-fixed (137 bytes) download


cdn.fancybar.net/ac/fancybar.js?zoneid=1502&serve=C6ADVKE&placement=pastebin benign
[nothing detected] (script) cdn.fancybar.net/ac/fancybar.js?zoneid=1502&serve=C6ADVKE&placement=pastebin
     status: (referer=pastebin.com/S37NAC4n)saved 21317 bytes 0194727dd6df1b2f697edcb1877cafd467a2ba8f
     info: [img] cdn.fancybar.net/ac/
     info: [decodingLevel=0] found JavaScript
     error: undefined function document.querySelectorAll
     error: undefined variable document.querySelectorAll(options.target)
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var document.querySelectorAll(options.target) = 1;
          error: line:1: ....^
     file: 0194727dd6df1b2f697edcb1877cafd467a2ba8f: 21317 bytes

Decoded Files
0194/727dd6df1b2f697edcb1877cafd467a2ba8f from cdn.fancybar.net/ac/fancybar.js?zoneid=1502&serve=C6ADVKE&placement=pastebin (21317 bytes) download


tags.expo9.exponential.com/tags/Pastebincom/SnackbarSafe/tags.js benign
[nothing detected] (script) tags.expo9.exponential.com/tags/Pastebincom/SnackbarSafe/tags.js
     status: (referer=pastebin.com/S37NAC4n)saved 7393 bytes 4fb70f2ae0e9309d0d7e53bad1eb9b517124bf6f
     info: [iframe] tags.expo9.exponential.com/tags/Pastebincom/SnackbarSafe/about:blank
     file: 4fb70f2ae0e9309d0d7e53bad1eb9b517124bf6f: 7393 bytes

Decoded Files
4fb7/0f2ae0e9309d0d7e53bad1eb9b517124bf6f from tags.expo9.exponential.com/tags/Pastebincom/SnackbarSafe/tags.js (7393 bytes, 1352 hidden) download


pastebin.com/js/jquery.min.js benign
[nothing detected] (script) pastebin.com/js/jquery.min.js
     status: (referer=pastebin.com/S37NAC4n)saved 84380 bytes 8258d046f17dd3c15a5d3984e1868b7b5d1db329
     file: 8258d046f17dd3c15a5d3984e1868b7b5d1db329: 84380 bytes

Decoded Files
8258/d046f17dd3c15a5d3984e1868b7b5d1db329 from pastebin.com/js/jquery.min.js (84380 bytes) download