JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 283b8fc46b057488b1b0b8790ff834804b12a44b (Received 2018-03-14 06:03:50, mp.weixin.qq.com )

URLStatus
mp.weixin.qq.com saved 74910 bytes 51e6a348c6165dec4a7ab75c67a39d7681ed945c

res.wx.qq.com/c/=/mpres/CN/htmledition/pages/login/loginpage/loginpage3c2fae.js,/mpres/CN/htmledition/pages/modules/base/base3c2fae.js,/mpres/CN/htmledition/modules/tab/tab3c2fae.js,/mpres/CN/htmledition/modules/tab/tab.css3c2faf.js,/mpres/ status: (referer=res.wx.qq.com/c/=/mpres/CN/htmledition/pages/login/loginpage/loginpage3c2fae.js,/mpres/CN/htmledition/pages/modules/base/base3c2fae.js,/mpres/CN/htmledition/modules/tab/tab3c2fae.js,/mpres/CN/htmledition/modules/tab/tab.css3c2faf.js,/mpres/CN/htmledition/modules/tab/tab.tpl3c2fae.js,/mpres/CN/htmledition/modules/msg/msg3c2fae.js,/mpres/CN/htmledition/modules/msg/msg.tpl3c2fae.js,/mpres/CN/htmledition/modules/msg/msg.css3c2faf.js,/mpres/CN/htmledition/modules/dialog/dialog3c2fae.js,/mpres/CN/htmledition/modules/dialog/dialog.css3c2faf.js,/mpres/CN/htmledition/modules/dialog/dialog.tpl3c2fae.js,/mpres/CN/htmledition/modules/button/button3c2fae.js,/mpres/CN/htmledition/modules/button/button.css3c2faf.js,/mpres/CN/htmledition/modules/button/button.tpl3c2fae.js,/mpres/CN/htmledition/pages/modules/faq/faq3c2faf.js,/mpres/CN/htmledition/pages/modules/faq/online.css3c2faf.js,/mpres/CN/htmledition/modules/utils/ajax3c2fae.js,/mpres/CN/htmledition/pages/modules/faq/faq.tpl3c2faf.js,/mpres/CN/htmledition/pages/modules/announcement/announcement3c2fae.js)

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
res.wx.qq.com/c/=/mpres/CN/htmledition/pages/login/loginpage/loginpage3c2fae.js,/mpres/CN/htmledition/pages/modules/base/base3c2fae.js,/mpres/CN/htmledition/modules/tab/tab3c2fae.js,/mpres/CN/htmledition/modules/tab/tab.css3c2faf.js,/mpres/ benign
[nothing detected] (script) res.wx.qq.com/c/=/mpres/CN/htmledition/pages/login/loginpage/loginpage3c2fae.js,/mpres/CN/htmledition/pages/modules/base/base3c2fae.js,/mpres/CN/htmledition/modules/tab/tab3c2fae.js,/mpres/CN/htmledition/modules/tab/tab.css3c2faf.js,/mpres/CN/htmledition/modules/tab/tab.tpl3c2fae.js,/mpres/CN/htmledition/modules/msg/msg3c2fae.js,/mpres/CN/htmledition/modules/msg/msg.tpl3c2fae.js,/mpres/CN/htmledition/modules/msg/msg.css3c2faf.js,/mpres/CN/htmledition/modules/dialog/dialog3c2fae.js,/mpres/CN/htmledition/modules/dialog/dialog.css3c2faf.js,/mpres/CN/htmledition/modules/dialog/dialog.tpl3c2fae.js,/mpres/CN/htmledition/modules/button/button3c2fae.js,/mpres/CN/htmledition/modules/button/button.css3c2faf.js,/mpres/CN/htmledition/modules/button/button.tpl3c2fae.js,/mpres/CN/htmledition/pages/modules/faq/faq3c2faf.js,/mpres/CN/htmledition/pages/modules/faq/online.css3c2faf.js,/mpres/CN/htmledition/modules/utils/ajax3c2fae.js,/mpres/CN/htmledition/pages/modules/faq/faq.tpl3c2faf.js,/mpres/CN/htmledition/pages/modules/announcement/announcement3c2fae.js
     status: (referer=mp.weixin.qq.com/)saved 35124 bytes 5074a742cb2a10b5b0823fd2b5598eb846b8787d
     info: [iframe] res.wx.qq.com/c/=/mpres/CN/htmledition/pages/login/loginpage/loginpage3c2fae.js,/mpres/CN/htmledition/pages/modules/base/base3c2fae.js,/mpres/CN/htmledition/modules/tab/tab3c2fae.js,/mpres/CN/htmledition/modules/tab/tab.css3c2faf.js,/mpres/CN/htmledition/modules/tab/tab.tpl3c2fae.js,/mpres/CN/htmledition/modules/msg/msg3c2fae.js,/mpres/CN/htmledition/modules/msg/msg.tpl3c2fae.js,/mpres/CN/htmledition/modules/msg/msg.css3c2faf.js,/mpres/CN/htmledition/modules/dialog/dialog3c2fae.js,/mpres/CN/htmledition/modules/dialog/dialog.css3c2faf.js,/mpres/CN/htmledition/modules/dialog/dialog.tpl3c2fae.js,/mpres/CN/htmledition/modules/button/button3c2fae.js,/mpres/CN/htmledition/modules/button/button.css3c2faf.js,/mpres/CN/htmledition/modules/button/button.tpl3c2fae.js,/mpres/CN/htmledition/pages/modules/faq/faq3c2faf.js,/mpres/CN/htmledition/pages/modules/faq/online.css3c2faf.js,/mpres/CN/htmledition/modules/utils/ajax3c2fae.js,/mpres/CN/htmledition/pages/modules/faq/faq.tpl3c2faf.js,/mpres/CN/htmledition/pages/modules/announcement/about:blank
     info: [img] res.wx.qq.com/mpres/htmledition/images/pic/common/qrcode.jpg
     file: 5074a742cb2a10b5b0823fd2b5598eb846b8787d: 35124 bytes

Decoded Files
5074/a742cb2a10b5b0823fd2b5598eb846b8787d from res.wx.qq.com/c/=/mpres/CN/htmledition/pages/login/loginpage/loginpage3c2fae.js,/mpres/CN/htmledition/pages/modules/base/base3c2fae.js,/mpres/CN/htmledition/modules/tab/tab3c2fae.js,/mpres/CN/htmledition/modules/tab/tab.css3c2faf.js,/mpres/ (35124 bytes, 1209 hidden) download


res.wx.qq.com/c/=/mpres/CN/htmledition/modules/input/input3c2fae.js,/mpres/CN/htmledition/modules/input/props3c2fae.js,/mpres/CN/htmledition/modules/input/validator3c2fae.js,/mpres/CN/htmledition/modules/input/input3c2fae.js,/mpres/CN/h benign
[nothing detected] (script) res.wx.qq.com/c/=/mpres/CN/htmledition/modules/input/input3c2fae.js,/mpres/CN/htmledition/modules/input/props3c2fae.js,/mpres/CN/htmledition/modules/input/validator3c2fae.js,/mpres/CN/htmledition/modules/input/input3c2fae.js,/mpres/CN/htmledition/modules/input/assign3c2fae.js,/mpres/CN/htmledition/modules/form/formElementDecorator3c2fae.js,/mpres/CN/htmledition/modules/input/input.css3c2faf.js,/mpres/CN/htmledition/modules/input/input.tpl3c2fae.js,/mpres/CN/htmledition/modules/radio/group3c2fae.js,/mpres/CN/htmledition/modules/radio/group.tpl3c2fae.js,/mpres/CN/htmledition/modules/radio/radio3c2fae.js,/mpres/CN/htmledition/modules/radio/radio.css3c2faf.js,/mpres/CN/htmledition/modules/radio/radio.tpl3c2fae.js
     status: (referer=mp.weixin.qq.com/)saved 25025 bytes 513ecc14737cd54f6f18f09f3d3a10df272bc8a7
     file: 513ecc14737cd54f6f18f09f3d3a10df272bc8a7: 25025 bytes

Decoded Files
513e/cc14737cd54f6f18f09f3d3a10df272bc8a7 from res.wx.qq.com/c/=/mpres/CN/htmledition/modules/input/input3c2fae.js,/mpres/CN/htmledition/modules/input/props3c2fae.js,/mpres/CN/htmledition/modules/input/validator3c2fae.js,/mpres/CN/htmledition/modules/input/input3c2fae.js,/mpres/CN/h (25025 bytes, 78 hidden) download


mp.weixin.qq.com/ benign
[nothing detected] mp.weixin.qq.com/
     status: (referer=http:/www.ask.com/web?q=puppies)saved 74910 bytes 51e6a348c6165dec4a7ab75c67a39d7681ed945c
     info: [script] res.wx.qq.com/mpres/CN/htmledition/pages/modules/base/jserr3c2fae.js
     info: [img] res.wx.qq.com/mpres/htmledition/images/qrcode3a7b38.gif
     info: [script] res.wx.qq.com/mpres/CN/htmledition/3rd/vue/vue3a7ad1.js
     info: [script] res.wx.qq.com/mpres/CN/htmledition/3rd/seajs/sea3a7ad1.js
     info: [script] res.wx.qq.com/c/=/mpres/CN/htmledition/pages/login/loginpage/loginpage3c2fae.js,/mpres/CN/htmledition/pages/modules/base/base3c2fae.js,/mpres/CN/htmledition/modules/tab/tab3c2fae.js,/mpres/CN/htmledition/modules/tab/tab.css3c2faf.js,/mpres/CN/htmledition/modules/tab/tab.tpl3c2fae.js,/mpres/CN/htmledition/modules/msg/msg3c2fae.js,/mpres/CN/htmledition/modules/msg/msg.tpl3c2fae.js,/mpres/CN/htmledition/modules/msg/msg.css3c2faf.js,/mpres/CN/htmledition/modules/dialog/dialog3c2fae.js,/mpres/CN/htmledition/modules/dialog/dialog.css3c2faf.js,/mpres/CN/htmledition/modules/dialog/dialog.tpl3c2fae.js,/mpres/CN/htmledition/modules/button/button3c2fae.js,/mpres/CN/htmledition/modules/button/button.css3c2faf.js,/mpres/CN/htmledition/modules/button/button.tpl3c2fae.js,/mpres/CN/htmledition/pages/modules/faq/faq3c2faf.js,/mpres/CN/htmledition/pages/modules/faq/online.css3c2faf.js,/mpres/CN/htmledition/modules/utils/ajax3c2fae.js,/mpres/CN/htmledition/pages/modules/faq/faq.tpl3c2faf.js,/mpres/CN/htmledition/pages/modules/announcement/announcement3c2fae.js
     info: [script] res.wx.qq.com/c/=/mpres/CN/htmledition/pages/modules/header/header3c2faf.js,/mpres/CN/htmledition/modules/group/group3c2fae.js,/mpres/CN/htmledition/modules/group/group.css3c2faf.js,/mpres/CN/htmledition/modules/group/list3c2fae.js,/mpres/CN/htmledition/modules/group/list.tpl3c2fae.js,/mpres/CN/htmledition/modules/group/group.tpl3c2fae.js,/mpres/CN/htmledition/pages/modules/utils/url3c2faf.js,/mpres/CN/htmledition/pages/modules/base/polyfill/symbol3c2faf.js,/mpres/CN/htmledition/pages/modules/base/polyfill/promise3c2faf.js,/mpres/CN/htmledition/pages/modules/utils/cgi3c2faf.js,/mpres/CN/htmledition/modules/toptips/toptips3c2fae.js,/mpres/CN/htmledition/modules/toptips/toptips.css3c2faf.js,/mpres/CN/htmledition/modules/toptips/toptips.tpl3c2fae.js,/mpres/CN/htmledition/modules/utils/string3c2fae.js,/mpres/CN/htmledition/modules/utils/object3c2fae.js,/mpres/CN/htmledition/3rd/md5/md53a7ad1.js,/mpres/CN/htmledition/3rd/cookie/cookie3a7ad1.js
     info: [script] res.wx.qq.com/c/=/mpres/CN/htmledition/modules/input/input3c2fae.js,/mpres/CN/htmledition/modules/input/props3c2fae.js,/mpres/CN/htmledition/modules/input/validator3c2fae.js,/mpres/CN/htmledition/modules/input/input3c2fae.js,/mpres/CN/htmledition/modules/input/assign3c2fae.js,/mpres/CN/htmledition/modules/form/formElementDecorator3c2fae.js,/mpres/CN/htmledition/modules/input/input.css3c2faf.js,/mpres/CN/htmledition/modules/input/input.tpl3c2fae.js,/mpres/CN/htmledition/modules/radio/group3c2fae.js,/mpres/CN/htmledition/modules/radio/group.tpl3c2fae.js,/mpres/CN/htmledition/modules/radio/radio3c2fae.js,/mpres/CN/htmledition/modules/radio/radio.css3c2faf.js,/mpres/CN/htmledition/modules/radio/radio.tpl3c2fae.js
     info: [script] res.wx.qq.com/mpres/CN/htmledition/3rd/tajs/tajs3ae9b1.js
     info: [decodingLevel=0] found JavaScript
     error: undefined variable Vue
     error: undefined variable Vue.config
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var Vue.config = 1;
          error: line:1: ....^
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE html><html> <head> <script type="text/javascript">
          error: line:3: ..............^
     file: 51e6a348c6165dec4a7ab75c67a39d7681ed945c: 74910 bytes

Decoded Files
51e6/a348c6165dec4a7ab75c67a39d7681ed945c from mp.weixin.qq.com/ (74910 bytes, 7682 hidden) download


res.wx.qq.com/mpres/CN/htmledition/pages/modules/base/jserr3c2fae.js benign
[nothing detected] (script) res.wx.qq.com/mpres/CN/htmledition/pages/modules/base/jserr3c2fae.js
     status: (referer=mp.weixin.qq.com/)saved 10671 bytes df1b171033089d46ce164f8a0ef06b6779742258
     file: df1b171033089d46ce164f8a0ef06b6779742258: 10671 bytes

Decoded Files
df1b/171033089d46ce164f8a0ef06b6779742258 from res.wx.qq.com/mpres/CN/htmledition/pages/modules/base/jserr3c2fae.js (10671 bytes) download


res.wx.qq.com/c/=/mpres/CN/htmledition/pages/modules/header/header3c2faf.js,/mpres/CN/htmledition/modules/group/group3c2fae.js,/mpres/CN/htmledition/modules/group/group.css3c2faf.js,/mpres/CN/htmle benign
[nothing detected] (script) res.wx.qq.com/c/=/mpres/CN/htmledition/pages/modules/header/header3c2faf.js,/mpres/CN/htmledition/modules/group/group3c2fae.js,/mpres/CN/htmledition/modules/group/group.css3c2faf.js,/mpres/CN/htmledition/modules/group/list3c2fae.js,/mpres/CN/htmledition/modules/group/list.tpl3c2fae.js,/mpres/CN/htmledition/modules/group/group.tpl3c2fae.js,/mpres/CN/htmledition/pages/modules/utils/url3c2faf.js,/mpres/CN/htmledition/pages/modules/base/polyfill/symbol3c2faf.js,/mpres/CN/htmledition/pages/modules/base/polyfill/promise3c2faf.js,/mpres/CN/htmledition/pages/modules/utils/cgi3c2faf.js,/mpres/CN/htmledition/modules/toptips/toptips3c2fae.js,/mpres/CN/htmledition/modules/toptips/toptips.css3c2faf.js,/mpres/CN/htmledition/modules/toptips/toptips.tpl3c2fae.js,/mpres/CN/htmledition/modules/utils/string3c2fae.js,/mpres/CN/htmledition/modules/utils/object3c2fae.js,/mpres/CN/htmledition/3rd/md5/md53a7ad1.js,/mpres/CN/htmledition/3rd/cookie/cookie3a7ad1.js
     status: (referer=mp.weixin.qq.com/)saved 30995 bytes 772ff58f1ffb17e69511d92c0d5dba4e5e305031
     file: 772ff58f1ffb17e69511d92c0d5dba4e5e305031: 30995 bytes

Decoded Files
772f/f58f1ffb17e69511d92c0d5dba4e5e305031 from res.wx.qq.com/c/=/mpres/CN/htmledition/pages/modules/header/header3c2faf.js,/mpres/CN/htmledition/modules/group/group3c2fae.js,/mpres/CN/htmledition/modules/group/group.css3c2faf.js,/mpres/CN/htmle (30995 bytes, 595 hidden) download


res.wx.qq.com/mpres/CN/htmledition/3rd/vue/vue3a7ad1.js benign
[nothing detected] (script) res.wx.qq.com/mpres/CN/htmledition/3rd/vue/vue3a7ad1.js
     status: (referer=mp.weixin.qq.com/)saved 98674 bytes f0fedd718aa6183d88647ee9619b8f6327714139
     file: f0fedd718aa6183d88647ee9619b8f6327714139: 98674 bytes

Decoded Files
f0fe/dd718aa6183d88647ee9619b8f6327714139 from res.wx.qq.com/mpres/CN/htmledition/3rd/vue/vue3a7ad1.js (98674 bytes) download


res.wx.qq.com/mpres/CN/htmledition/3rd/seajs/sea3a7ad1.js benign
[nothing detected] (script) res.wx.qq.com/mpres/CN/htmledition/3rd/seajs/sea3a7ad1.js
     status: (referer=mp.weixin.qq.com/)saved 8959 bytes f8a4167d9afb292c25b7ee3e5527a16f055bfaf7
     info: [decodingLevel=0] found JavaScript
     error: undefined function e.getAttribute
     error: undefined variable e
     suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
     file: f8a4167d9afb292c25b7ee3e5527a16f055bfaf7: 8959 bytes
     file: 90f41e4caa0017eaa29697c693f3513016ad1751: 9448 bytes
     file: bf18ae526ad42e3c83ff8a50ab9f3ba10302a8d0: 9640 bytes
     file: 8cc914e9568159951a05508248d7c806e4a89976: 9354 bytes
     file: d39b8e8f73a6710f017424c147a5da8399033742: 9478 bytes

Decoded Files
f8a4/167d9afb292c25b7ee3e5527a16f055bfaf7 from res.wx.qq.com/mpres/CN/htmledition/3rd/seajs/sea3a7ad1.js (8959 bytes) download

90f4/1e4caa0017eaa29697c693f3513016ad1751 from res.wx.qq.com/mpres/CN/htmledition/3rd/seajs/sea3a7ad1.js (9448 bytes) download

bf18/ae526ad42e3c83ff8a50ab9f3ba10302a8d0 from res.wx.qq.com/mpres/CN/htmledition/3rd/seajs/sea3a7ad1.js (9640 bytes) download

8cc9/14e9568159951a05508248d7c806e4a89976 from res.wx.qq.com/mpres/CN/htmledition/3rd/seajs/sea3a7ad1.js (9354 bytes) download

d39b/8e8f73a6710f017424c147a5da8399033742 from res.wx.qq.com/mpres/CN/htmledition/3rd/seajs/sea3a7ad1.js (9478 bytes) download


res.wx.qq.com/mpres/CN/htmledition/3rd/tajs/tajs3ae9b1.js benign
[nothing detected] (script) res.wx.qq.com/mpres/CN/htmledition/3rd/tajs/tajs3ae9b1.js
     status: (referer=mp.weixin.qq.com/)saved 6280 bytes 5869522b297eefaf0cae033bd23565fd4105b374
     info: [img] res.wx.qq.com/mpres/CN/htmledition/3rd/tajs/
     info: [decodingLevel=0] found JavaScript
     error: undefined variable d.search
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var d.search = 1;
          error: line:1: ....^
     file: 5869522b297eefaf0cae033bd23565fd4105b374: 6280 bytes

Decoded Files
5869/522b297eefaf0cae033bd23565fd4105b374 from res.wx.qq.com/mpres/CN/htmledition/3rd/tajs/tajs3ae9b1.js (6280 bytes, 58 hidden) download