JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 3097475c3c2f2acf13c92efcdc7c1eebdd3fcbd4 (Received 2013-08-17 10:39:24, http://file-save.com/activation7873098.html )

URLStatus
file-save.com/activation7873098.html saved 369 bytes 1c2861c27f62cf3ddf586e7814c46c088bb26ef5

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
widget.sharecash.org/adblock.php benign
[nothing detected] (var newurl) widget.sharecash.org/adblock.php
     status: (referer=file-save.com/activation7873098.html)saved 2882 bytes f61a7095d75d6d7b2df7c7f7b282aef8fee20b58
     file: f61a7095d75d6d7b2df7c7f7b282aef8fee20b58: 2882 bytes

Decoded Files
f61a/7095d75d6d7b2df7c7f7b282aef8fee20b58 from widget.sharecash.org/adblock.php (2882 bytes, 288 hidden) download


widget.sharecash.org/js.php?id=6230 benign
[nothing detected] (script) widget.sharecash.org/js.php?id=6230
     status: (referer=file-save.com/activation7873098.html)saved 80610 bytes 5711e5011fb2ab2e31042b8124cb6db4bdd7e505
     info: [decodingLevel=0] found JavaScript
     error: undefined function window.scrollTo
     error: undefined variable FecyrFySNbnC.style
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var FecyrFySNbnC.style = 1;
          error: line:1: ....^
     info: [img] sharecash.org/images/long.gif
     info: [decodingLevel=1] found JavaScript
     info: [decodingLevel=2] found JavaScript
     info: [decodingLevel=3] found JavaScript
     suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
     file: 5711e5011fb2ab2e31042b8124cb6db4bdd7e505: 80610 bytes
     file: 227a16a59dc0a859a3b2d45c86aef1312c50efa9: 69103 bytes
     file: 29fc9880f32064951ed3432eae5e26352936148f: 38930 bytes
     file: 7e20e624a054a0b644fe70063be6d27900af519d: 10077 bytes
     file: ab71553fbda147a9c2f2888ac43eebc9d7969da0: 10607 bytes
     file: 84f01dc79f6629263495dd594cd1f98c668066af: 391 bytes

Decoded Files
5711/e5011fb2ab2e31042b8124cb6db4bdd7e505 from widget.sharecash.org/js.php?id=6230 (80610 bytes, 3 hidden) download

227a/16a59dc0a859a3b2d45c86aef1312c50efa9 from widget.sharecash.org/js.php?id=6230 (69103 bytes, 149 hidden) download

29fc/9880f32064951ed3432eae5e26352936148f from widget.sharecash.org/js.php?id=6230 (38930 bytes, 293 hidden) download

7e20/e624a054a0b644fe70063be6d27900af519d from widget.sharecash.org/js.php?id=6230 (10077 bytes, 154 hidden) download

ab71/553fbda147a9c2f2888ac43eebc9d7969da0 from widget.sharecash.org/js.php?id=6230 (10607 bytes, 154 hidden) download

84f0/1dc79f6629263495dd594cd1f98c668066af from widget.sharecash.org/js.php?id=6230 (391 bytes, 8 hidden) download


file-save.com/activation7873098.html benign
[nothing detected] file-save.com/activation7873098.html
     status: (referer=http:/www.ask.com/web?q=puppies)saved 369 bytes 1c2861c27f62cf3ddf586e7814c46c088bb26ef5
     info: [meta refresh] URL=widget.sharecash.org/nojs.php
     info: [script] widget.sharecash.org/js.php?id=6230
     info: [decodingLevel=0] found JavaScript
     info: [windowlocation] URL=widget.sharecash.org/adblock.php
     info: [var location] URL=widget.sharecash.org/adblock.php
     info: [var newurl] URL=widget.sharecash.org/adblock.php
     info: [decodingLevel=1] found JavaScript
     file: 1c2861c27f62cf3ddf586e7814c46c088bb26ef5: 369 bytes
     file: 43d1d0308bd34b1c552075b5fdc59f2f81165e91: 213 bytes

Decoded Files
1c28/61c27f62cf3ddf586e7814c46c088bb26ef5 from file-save.com/activation7873098.html (369 bytes) download

43d1/d0308bd34b1c552075b5fdc59f2f81165e91 from file-save.com/activation7873098.html (213 bytes) download


widget.sharecash.org/nojs.php benign
[nothing detected] (metarefresh) widget.sharecash.org/nojs.php
     status: (referer=file-save.com/activation7873098.html)saved 2995 bytes 51bb5be726836dacdbb92d12a02703d8b078106d
     file: 51bb5be726836dacdbb92d12a02703d8b078106d: 2995 bytes

Decoded Files
51bb/5be726836dacdbb92d12a02703d8b078106d from widget.sharecash.org/nojs.php (2995 bytes, 288 hidden) download