JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 33cfc0bf05e2d0be1af90e928ab44d65cd406438 (Received 2012-11-13 15:32:21, http://ad.adnetwork.net/st?ad_type=iframe&ad_size=728x90&section=3782095&pub_url=${PUB_URL}&pub_redirect=http://ib.adnxs.com/click?AAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA_AAAAAAAAAAAAAAAAAAAAAAW5h3lVNHZVatNS-KjDNwhbOJ9QAAAAAABMDwDOAgAAKQQAAAIAAADngTsAUbICAAAAAQBV)

URLStatus
ad.adnetwork.net/st?type=iframe&size=728x90&section=3782095&url=${PUB_URL}&redirect=http:/ib.adnxs.com/click?AAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA_AAAAAAAAAAAAAAAAAAAAAAW5h3lVNHZVatNS-KjDNwhbOJ9QAAAAAABMDwDOAgAAKQQAAAIAAADngTsAUbICAAAAAQBVU saved 5010 bytes ea276e6283e86684c0ae6f317635eb1590dc04e6

ads.pubmatic.com/AdServer/js/ status: (referer=ads.pubmatic.com/AdServer/js/syncuppixels.html)

tag.admeld.com/ad/js/ status: (referer=js.admeld.com/meld128.js)

tag.admeld.com/ad/iframe/0/0/0/ros?t=1352838748162&tz=300&m=0&hu=&ht=js&hp=0&fo=&url=js.admeld.com/meld128.js&refer=undefined status: (referer=js.admeld.com/meld128.js)

mshakers.rotator.hadj7.adjuggler.net/servlet/ajrotator/232527/0/vj?z=mshakers&dim=221012&kw=&click=&abr=$scriptiniframe status: (referer=ad.adnetwork.net/imp?Z=728x90&x=http:/ib.adnxs.com/click?AAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA_AAAAAAAAAAAAAAAAAAAAAAW5h3lVNHZVatNS-KjDNwhbOJ9QAAAAAABMDwDOAgAAKQQAAAIAAADngTsAUbICAAAAAQBVU&s=3782095&T=3&_salt=3136589603&B=10&u=undefined&r=)

All Malicious or Suspicious Elements of Submission

None
ad.adnetwork.net/st?type=iframe&size=728x90&section=3782095&url=${PUB_URL}&redirect=http:/ib.adnxs.com/ benign
[nothing detected] (var newurl) ad.adnetwork.net/st?type=iframe&size=728x90&section=3782095&url=${PUB_URL}&redirect=http:/ib.adnxs.com/
     status: (referer=ad.adnetwork.net/st?type=iframe&size=728x90&section=3782095&url=${PUB_URL}&redirect=http:/ib.adnxs.com/click?AAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA_AAAAAAAAAAAAAAAAAAAAAAW5h3lVNHZVatNS-KjDNwhbOJ9QAAAAAABMDwDOAgAAKQQAAAIAAADngTsAUbICAAAAAQBVU)saved 4596 bytes b4ac065c1d0874d330d64c15e293ee4002efee7e
     info: [script] ad.adnetwork.net/st?type=iframe&size=728x90&section=3782095&url=${PUB_URL}&redirect=http:/ib.adnxs.com/
     info: [img] ad.adnetwork.net/imp?Z=728x90&x=http%3a%2f%2fib.adnxs.com%2f&s=3782095&T=3&_salt=584317578&t=2
     info: [decodingLevel=0] found JavaScript
     info: [var url] URL=ad.adnetwork.net/imp?Z=728x90&x=http%3a%2f%2fib.adnxs.com%2f&s=3782095&T=3&_salt=584317578&B=10&u=undefined&r=1
     info: [var src] URL=ad.adnetwork.net/st?type=iframe&size=728x90&section=3782095&url=${PUB_URL}&redirect=http:/ib.adnxs.com/
     info: [var newurl] URL=ad.adnetwork.net/st?type=iframe&size=728x90&section=3782095&url=${PUB_URL}&redirect=http:/ib.adnxs.com/
     info: [decodingLevel=1] found JavaScript
     file: b4ac065c1d0874d330d64c15e293ee4002efee7e: 4596 bytes
     file: d18dc828d139ea9478167177470698a979f2241d: 731 bytes

Decoded Files
b4ac/065c1d0874d330d64c15e293ee4002efee7e from ad.adnetwork.net/st?type=iframe&size=728x90&section=3782095&url=${PUB_URL}&redirect=http:/ib.adnxs.com/ (4596 bytes) download

d18d/c828d139ea9478167177470698a979f2241d from ad.adnetwork.net/st?type=iframe&size=728x90&section=3782095&url=${PUB_URL}&redirect=http:/ib.adnxs.com/ (731 bytes) download


ad.adnetwork.net/st?type=iframe&size=728x90&section=3782095&url=${PUB_URL}&redirect=http:/ib.adnxs.com/click?AAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA_AAAAAAAAAAAAAAAAAAAAAAW5h3lVNHZVatNS-KjDNwhbOJ9QAAAAAABMDwDOAgAAKQQAAAIAAADngTsAUbICAAAAAQBVU benign
[nothing detected] ad.adnetwork.net/st?type=iframe&size=728x90&section=3782095&url=${PUB_URL}&redirect=http:/ib.adnxs.com/click?AAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA_AAAAAAAAAAAAAAAAAAAAAAW5h3lVNHZVatNS-KjDNwhbOJ9QAAAAAABMDwDOAgAAKQQAAAIAAADngTsAUbICAAAAAQBVU
     status: (referer=http:/www.ask.com/web?q=puppies)saved 5010 bytes ea276e6283e86684c0ae6f317635eb1590dc04e6
     info: [script] ad.adnetwork.net/st?type=iframe&size=728x90&section=3782095&url=${PUB_URL}&redirect=http:/ib.adnxs.com/
     info: [img] ad.adnetwork.net/imp?Z=728x90&x=http%3a%2f%2fib.adnxs.com%2fclick%3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA%5fAAAAAAAAAAAAAAAAAAAAAAW5h3lVNHZVatNS%2dKjDNwhbOJ9QAAAAAABMDwDOAgAAKQQAAAIAAADngTsAUbICAAAAAQBVU&s=3782095&T=3&_salt=3136589603&t=2
     info: [decodingLevel=0] found JavaScript
     info: [var url] URL=ad.adnetwork.net/imp?Z=728x90&x=http%3a%2f%2fib.adnxs.com%2fclick%3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA%5fAAAAAAAAAAAAAAAAAAAAAAW5h3lVNHZVatNS%2dKjDNwhbOJ9QAAAAAABMDwDOAgAAKQQAAAIAAADngTsAUbICAAAAAQBVU&s=3782095&T=3&_salt=3136589603&B=10&u=undefined&r=
     info: [var src] URL=ad.adnetwork.net/st?type=iframe&size=728x90&section=3782095&url=${PUB_URL}&redirect=http:/ib.adnxs.com/
     info: [var newurl] URL=ad.adnetwork.net/st?type=iframe&size=728x90&section=3782095&url=${PUB_URL}&redirect=http:/ib.adnxs.com/
     info: [decodingLevel=1] found JavaScript
     error: line:8: invalid XML attribute value:
          error: line:8:
          error: line:8: ....................................^
          error: line:8: SyntaxError: unterminated string literal:
          error: line:8:
          error: line:8: ....................................^
     error: line:8: invalid XML attribute value:
          error: line:8:
          error: line:8: ............................................^
          error: line:8: SyntaxError: unterminated string literal:
          error: line:8:
          error: line:8: ....................................^
     file: ea276e6283e86684c0ae6f317635eb1590dc04e