JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 2b40a037ab9306b5842e6150e4806b34decc5a55 (Received 2010-05-26 11:16:46, http://www.freedocast.com/player/freedocast_embed.js )

URLStatus
www.freedocast.com/player/embed.js saved 256 bytes fetch_3b5d985182fceb6c61bd37e976a345a1b210cd54

ad.xtendmedia.com/ status: (referer=ad.xtendmedia.com/st?ad_type=pop&ad_size=0x0&section=927478&banned_pop_types=28&pop_times=1&pop_frequency=86400)failure: HTTP Error 404: Not Found

ad.yieldmanager.com/adoutput/adoutput.swf status: (referer=ad.xtendmedia.com/imp?Z=0x0&y=28&s=927478&_salt=445237595&B=10&r=0)failure: HTTP Error 404: Not Found

ad.xtendmedia.com/rw?title=New offer!&qs=iframe3?niwMAPYmDgA7v0wAAAAAADoVFQAAAAAAAgAAAAAAAAAAAP8AAAAECdEdHAAAAAAADhoNAAAAAACDcRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdvwcAAAAAAAICAwAAAAAAAAAAAAAAAAAAABiJUeb3PwAAAAAAAAAAAACUR5nqA0AAAA

All Malicious or Suspicious Elements of Submission

None
ad.xtendmedia.com/imp?Z=0x0&y=28&s=927478&_salt=445237595&B=10&r=0 benign
[nothing detected] (script) ad.xtendmedia.com/imp?Z=0x0&y=28&s=927478&_salt=445237595&B=10&r=0
     status: (referer=ad.xtendmedia.com/st?type=pop&size=0x0&section=927478&types=28&times=1&frequency=86400)saved 7029 bytes 100f3df6fbd912543db193a1ab2386acdb7578c7
     info: [embed] ad.yieldmanager.com/adoutput/adoutput.swf
     info: [decodingLevel=0] found JavaScript
     error: undefined variable clearTimeout
     error: undefined function x.focus
     error: undefined variable x
     info: [open] URL=ad.xtendmedia.com/rw?title=New%20offer%21&qs=iframe3%3FniwMAPYmDgA7v0wAAAAAADoVFQAAAAAAAgAAAAAAAAAAAP8AAAAECdEdHAAAAAAADhoNAAAAAACDcRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdvwcAAAAAAAICAwAAAAAAAAAAAAAAAAAAABiJUeb3PwAAAAAAAAAAAACUR5nqA0AAAAAAAAAAAAAA0IH%2Eow5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQPXbcQfJFCLtEkmMFFFgjibRdzl6zVGuweZyJAAAAAA%3D%3D%2C%2Chttp%253A%252F%252Fad%2Extendmedia%2Ecom%252Fst%253Fad%5Ftype%253Dpop%2526ad%5Fsize%253D0x0%2526section%253D927478%2526banned%5Fpop%5Ftypes%253D28%2526pop%5Ftimes%253D1%2526pop%5Ffrequency%253D86400%2CZ%253D0x0%2526y%253D28%2526s%253D927478%2526%5Fsalt%253D445237595%2526B%253D10%2526r%253D0%2C82c5a280%2D68be%2D11df%2D9fca%2D003048d66a7a
     info: [var out] URL=ad.xtendmedia.com/
     info: [var newurl] URL=ad.xtendmedia.com/
     info: [decodingLevel=1] found JavaScript
     error: line:13: SyntaxError: missing ; before statement:
          error: line:13: <input style="width:0px; top:0px; position:absolute; visibility:hidden;" id="oV6" onchange="fV8(fV1,5,true)"><div style="display:inline" id="oV10"></div>
          error: line:13: .^
     file: 100f3df6fbd912543db193a1ab2386acdb7578c7: 7029 bytes
     file: d3b498eeb4d7117eae4f5c447df76281c791e1de: 1289 bytes

Decoded Files
100f/3df6fbd912543db193a1ab2386acdb7578c7 from ad.xtendmedia.com/imp?Z=0x0&y=28&s=927478&_salt=445237595&B=10&r=0 (7029 bytes) download

d3b4/98eeb4d7117eae4f5c447df76281c791e1de from ad.xtendmedia.com/imp?Z=0x0&y=28&s=927478&_salt=445237595&B=10&r=0 (1289 bytes) download


www.google-analytics.com/ga.js benign
[nothing detected] (script) www.google-analytics.com/ga.js
     status: (referer=www.freedocast.com/forms/embedplayer1.aspx?fid=1&ftype=1&ad=true)saved 25137 bytes dc8fa9dd6e7ee7f4b0484393800a54a0ff7e6d1b
     info: [decodingLevel=0] found JavaScript
     file: dc8fa9dd6e7ee7f4b0484393800a54a0ff7e6d1b: 25137 bytes

Decoded Files
dc8f/a9dd6e7ee7f4b0484393800a54a0ff7e6d1b from www.google-analytics.com/ga.js (25137 bytes) download


pixel.quantserve.com/ benign
[nothing detected] (jsvar) pixel.quantserve.com/
     status: (referer=edge.quantserve.com/quant.js)saved 295 bytes 2dc5061058227cb9aa376b9bfb0d137c2b0d5d7f
     info: [img] pixel.quantserve.com/logo.png
     info: [0] no JavaScript
     file: 2dc5061058227cb9aa376b9bfb0d137c2b0d5d7f: 295 bytes

Decoded Files
2dc5/061058227cb9aa376b9bfb0d137c2b0d5d7f from pixel.quantserve.com/ (295 bytes) download


cdn.freedocast.com/vads/Freedocastpreroll15sec.js benign
[nothing detected] (script) cdn.freedocast.com/vads/Freedocastpreroll15sec.js
     status: (referer=www.freedocast.com/forms/embedplayer1.aspx?fid=1&ftype=1&ad=true)saved 11315 bytes d566180bbfd407e0bbaefbdb1218e972af03e60c
     info: [img] cdn.freedocast.com/images/icon.png
     info: [decodingLevel=0] found JavaScript
     error: undefined variable Height
     error: undefined variable Width
     info: [1] no JavaScript
     file: d566180bbfd407e0bbaefbdb1218e972af03e60c: 11315 bytes
     file: afe921fd191a63564360bfb6b7d6d16ee6925283: 16 bytes

Decoded Files
d566/180bbfd407e0bbaefbdb1218e972af03e60c from cdn.freedocast.com/vads/Freedocastpreroll15sec.js (11315 bytes, 529 hidden) download

afe9/21fd191a63564360bfb6b7d6d16ee6925283 from cdn.freedocast.com/vads/Freedocastpreroll15sec.js (16 bytes) download


www.freedocast.com/player/embed.js benign
[nothing detected] www.freedocast.com/player/embed.js
     status: (referer=www.google.com/trends/hottrends)saved 256 bytes 3b5d985182fceb6c61bd37e976a345a1b210cd54
     info: [decodingLevel=0] found JavaScript
     error: undefined variable fid
     error: undefined variable ftype
     info: DecodedIframe detected
     info: [iframe] www.freedocast.com/forms/embedplayer.aspx?fid=1&ftype=1&domain=undefined
     info: [decodingLevel=1] found JavaScript
     file: 3b5d985182fceb6c61bd37e976a345a1b210cd54: 256 bytes
     file: 63179c44e889b312ddf96b91ee6c726af855804d: 210 bytes

Decoded Files
3b5d/985182fceb6c61bd37e976a345a1b210cd54 from www.freedocast.com/player/embed.js (256 bytes, 5 hidden) download

6317/9c44e889b312ddf96b91ee6c726af855804d from www.freedocast.com/player/embed.js (210 bytes) download


edge.quantserve.com/quant.js benign
[nothing detected] (script) edge.quantserve.com/quant.js
     status: (referer=www.freedocast.com/forms/embedplayer1.aspx?fid=1&ftype=1&ad=true)saved 4254 bytes 8cba843410483655eb96f246e81ebeee2c676fe3
     info: [javascript variable] URL=pixel.quantserve.com
     info: [decodingLevel=0] found JavaScript
     file: 8cba843410483655eb96f246e81ebeee2c676fe3: 4254 bytes

Decoded Files
8cba/843410483655eb96f246e81ebeee2c676fe3 from edge.quantserve.com/quant.js (4254 bytes, 30 hidden) download


ad.xtendmedia.com/rw?title=New offer!&qs=iframe3?niwMAPYmDgA7v0wAAAAAADoVFQAAAAAAAgAAAAAAAAAAAP8AAAAECdEdHAAAAAAADhoNAAAAAACDcRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdvwcAAAAAAAICAwAAAAAAAAAAAAAAAAAAABiJUeb3PwAAAAAAAAAAAACUR5nqA0AAAA benign
[nothing detected] ad.xtendmedia.com/rw?title=New offer!&qs=iframe3?niwMAPYmDgA7v0wAAAAAADoVFQAAAAAAAgAAAAAAAAAAAP8AAAAECdEdHAAAAAAADhoNAAAAAACDcRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdvwcAAAAAAAICAwAAAAAAAAAAAAAAAAAAABiJUeb3PwAAAAAAAAAAAACUR5nqA0AAAAAAAAAAAAAA0IH.ow5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQPXbcQfJFCLtEkmMFFFgjibRdzl6zVGuweZyJAAAAAA==,,http:/ad.xtendmedia.com/st?type=pop&size=0x0&section=927478&types=28&times=1&frequency=86400,Z=0x0&y=28&s=927478&_salt=445237595&B=10&r=0,82c5a280-68be-11df-9fca-003048d66a7a
     status: (referer=ad.xtendmedia.com/imp?Z=0x0&y=28&s=927478&_salt=445237595&B=10&r=0)saved 98 bytes 89203398b5fcdbe1545077f9fba19c1849aa865a
     info: [0] no JavaScript
     file: 89203398b5fcdbe1545077f9fba19c1849aa865a: 98 bytes

Decoded Files
8920/3398b5fcdbe1545077f9fba19c1849aa865a from ad.xtendmedia.com/rw?title=New offer!&qs=iframe3?niwMAPYmDgA7v0wAAAAAADoVFQAAAAAAAgAAAAAAAAAAAP8AAAAECdEdHAAAAAAADhoNAAAAAACDcRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdvwcAAAAAAAICAwAAAAAAAAAAAAAAAAAAABiJUeb3PwAAAAAAAAAAAACUR5nqA0AAAA (98 bytes) download


www.freedocast.com/forms/embedplayer.aspx?fid=1&ftype=1&domain=undefined benign
[nothing detected] (iframe) www.freedocast.com/forms/embedplayer.aspx?fid=1&ftype=1&domain=undefined
     status: (referer=www.freedocast.com/player/embed.js)saved 1825 bytes 22a4d68fc95c2f4d027a9e8c90e178c6a21b0940
     info: [iframe] www.freedocast.com/forms/embedplayer1.aspx?fid=1&ftype=1&ad=true
     info: [script] edge.quantserve.com/quant.js
     info: [img] pixel.quantserve.com/pixel/p-7aUNympmuYViE.gif
     info: [decodingLevel=0] found JavaScript
     error: undefined variable _gat
     error: undefined function _gat._getTracker
     info: [var gaJsHost] URL=www.
     info: [var newurl] URL=www.
     info: [script] www.google-analytics.com/ga.js