JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 2940cad83dfef43ec59243dc537151a3273d4037 (Received 2017-10-11 08:03:45, main.php%3fpage=9579a056fa70e620 )

URLStatus
127.0.0.1/

127.0.0.1/undefined

127.0.0.1/document.write('

All Malicious or Suspicious Elements of Submission

malicious: Alert detected /alert CVE-2006-0003 shellexecute with ./../e8648f9.exe
upload malicious
[malicious:10] upload
     info: [decodingLevel=0] found JavaScript
     info: DecodedGenericCLSID detected D27CDB6E-AE6D-11CF-96B8-444553540000 CA8A9780-280D-11CF-A24D-444553540000 BD96C556-65A3-11D0-983A-00C04FC29E36 d27cdb6e-ae6d-11cf-96b8-444553540000
     malicious: Alert detected /alert CVE-2006-0003 shellexecute with ./../e8648f9.exe
     info: [open] URL=one.hoz.cc/w.php?f=97d19&e=2
     info: [element] URL=127.0.0.1/undefined
     info: [var s] URL=127.0.0.1/document.write('
     info: [embed] 127.0.0.1/
     info: [decodingLevel=1] found JavaScript
     info: file: saved upload to (d293771aa8cdb69a9b049f6d8f7df56c0e0e6094)
     file: d293771aa8cdb69a9b049f6d8f7df56c0e0e6094: 47389 bytes
     file: e02913bcebcb403e2274f248bfff1cdfee12e664: 17056 bytes

Decoded Files
d293/771aa8cdb69a9b049f6d8f7df56c0e0e6094 from upload (47389 bytes, 20 hidden) download

e029/13bcebcb403e2274f248bfff1cdfee12e664 from upload (17056 bytes) download


one.hoz.cc/w.php?f=97d19&e=2 benign
[nothing detected] (open) one.hoz.cc/w.php?f=97d19&e=2
     status: (referer=http:/www.ask.com/web?q=puppies)saved 334 bytes ec0a74912bbab9320d8b25cfe4193df2c05c8380
     info: [0] no JavaScript
     file: ec0a74912bbab9320d8b25cfe4193df2c05c8380: 334 bytes

Decoded Files
ec0a/74912bbab9320d8b25cfe4193df2c05c8380 from one.hoz.cc/w.php?f=97d19&e=2 (334 bytes, 6 hidden) download