JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 9043c08a180b5c8929b557a37f7cb75e87bd6ca1 (Received 2017-10-13 04:57:39, maqam )

URLStatus
rc.rlcdn.com/366098.html status: (referer=g2.gumgum.com/javascripts/ggv2.js)

ads.smowtion.com/slider.js?s=892208&z=160x600&a=tr&c=c97e1ce4cbd2fdaca6746a9b90095e74 status: (referer=http:/www.ask.com/web?q=puppies)failure: <urlopen error [Errno -2] Name or service not known>

All Malicious or Suspicious Elements of Submission

None
g2.gumgum.com/javascripts/ggv2.js benign
[nothing detected] (script) g2.gumgum.com/javascripts/ggv2.js
     status: (referer=http:/www.ask.com/web?q=puppies)saved 76350 bytes 3c6e78ac1a98ad9a2cd7b27d712e3cf2948a7ff4
     info: [iframe] g2.gumgum.com/javascripts/_U_
     info: [img] g2.gumgum.com/javascripts/
     info: [img] c.gumgum.com/images/pixel.gif
     info: [img] c.gumgum.com/images/logo/all300.png
     info: [iframe] rc.rlcdn.com/366098.html
     info: [decodingLevel=0] found JavaScript
     error: undefined variable n.children
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var n.children = 1;
          error: line:1: ....^
     info: DecodedMsg detected /info.ActiveXObject ShockwaveFlash.ShockwaveFlash
     info: [element] URL=g2.gumgum.com/javascripts/undefined
     info: [1] no JavaScript
     file: 3c6e78ac1a98ad9a2cd7b27d712e3cf2948a7ff4: 76350 bytes
     file: 2db7754b4f046b6fa80ca31d174759d5d97c77a0: 196 bytes

Decoded Files
3c6e/78ac1a98ad9a2cd7b27d712e3cf2948a7ff4 from g2.gumgum.com/javascripts/ggv2.js (76350 bytes, 271 hidden) download

2db7/754b4f046b6fa80ca31d174759d5d97c77a0 from g2.gumgum.com/javascripts/ggv2.js (196 bytes) download


g2.gumgum.com/javascripts/undefined benign
[nothing detected] (element) g2.gumgum.com/javascripts/undefined
     status: (referer=g2.gumgum.com/javascripts/ggv2.js)saved 564 bytes 1b3291d4eea179c84145b2814cb53e6a506ec201
     info: [0] no JavaScript
     file: 1b3291d4eea179c84145b2814cb53e6a506ec201: 564 bytes

Decoded Files
1b32/91d4eea179c84145b2814cb53e6a506ec201 from g2.gumgum.com/javascripts/undefined (564 bytes, 13 hidden) download


ads.clicksor.com/showAd.php?nid=1&amp;pid=167686&amp;adtype=1&amp;sid=257037&amp;zone=34253 benign
[nothing detected] (script) ads.clicksor.com/showAd.php?nid=1&amp;pid=167686&amp;adtype=1&amp;sid=257037&amp;zone=34253
     status: (referer=http:/www.ask.com/web?q=puppies)saved 62 bytes 48b72953aec8ef752eaf2fb76eb56d7d53497dde
     info: [0] no JavaScript
     file: 48b72953aec8ef752eaf2fb76eb56d7d53497dde: 62 bytes

Decoded Files
48b7/2953aec8ef752eaf2fb76eb56d7d53497dde from ads.clicksor.com/showAd.php?nid=1&amp;pid=167686&amp;adtype=1&amp;sid=257037&amp;zone=34253 (62 bytes) download


tags.expo9.exponential.com/tags/Liilas/Ros/tags.js benign
[nothing detected] (script) tags.expo9.exponential.com/tags/Liilas/Ros/tags.js
     status: (referer=http:/www.ask.com/web?q=puppies)saved 59386 bytes a88239ee77b1ee765348b3a9cbdce9ecf8652d35
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [javascript variable] URL=
     info: [iframe] tags.expo9.exponential.com/tags/Liilas/Ros/
     info: [img] tags.expo9.exponential.com/tags/Liilas/Ros/
     info: [frame] tags.expo9.exponential.com/tags/Liilas/Ros/
     info: [decodingLevel=0] found JavaScript
     info: [script] a.tribalfusion.com/displayAd.js?dver=0.8&th=24234311848
     info: [decodingLevel=1] found JavaScript
     file: a88239ee77b1ee765348b3a9cbdce9ecf8652d35: 59386 bytes
     file: a548e7465627d2bcfc32869bd8449f403bb8bbc4: 134 bytes

Decoded Files
a882/39ee77b1ee765348b3a9cbdce9ecf8652d35 from tags.expo9.exponential.com/tags/Liilas/Ros/tags.js (59386 bytes, 22352 hidden) download

a548/e7465627d2bcfc32869bd8449f403bb8bbc4 from tags.expo9.exponential.com/tags/Liilas/Ros/tags.js (134 bytes) download


upload benign
[nothing detected] upload
     info: [img] www.maqamworld.com/images/layout/banner.jpg
     info: [img] www.maqamworld.com/images/layout/oud.jpg
     info: [script] tags.expo9.exponential.com/tags/Liilas/Ros/tags.js
     info: [script] ads.clicksor.com/showAd.php?nid=1&amp;pid=167686&amp;adtype=1&amp;sid=257037&amp;zone=34253
     info: [script] ads.smowtion.com/slider.js?s=892208&z=160x600&a=tr&c=c97e1ce4cbd2fdaca6746a9b90095e74
     info: [img] bit.ly/hxLEG7
     info: [script] g2.gumgum.com/javascripts/ggv2.js
     info: [decodingLevel=0] found JavaScript
     error: line:9: SyntaxError: XML tag name mismatch (expected meta):
          error: line:9: </head>
          error: line:9: ..^
     file: c252843f436fe433a323f4b35fd13c0693fff50e: 25042 bytes

Decoded Files
c252/843f436fe433a323f4b35fd13c0693fff50e from upload (25042 bytes, 665 hidden) download


tags.expo9.exponential.com/tags/Liilas/Ros/ benign
[nothing detected] (frame) tags.expo9.exponential.com/tags/Liilas/Ros/
     status: (referer=tags.expo9.exponential.com/tags/Liilas/Ros/tags.js)saved 59386 bytes a88239ee77b1ee765348b3a9cbdce9ecf8652d35
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [javascript variable] URL=
     info: [iframe] tags.expo9.exponential.com/tags/Liilas/Ros/
     info: [img] tags.expo9.exponential.com/tags/Liilas/Ros/
     info: [frame] tags.expo9.exponential.com/tags/Liilas/Ros/
     info: [decodingLevel=0] found JavaScript
     info: [script] a.tribalfusion.com/displayAd.js?dver=0.8&th=24234311848
     info: [decodingLevel=1] found JavaScript
     file: a88239ee77b1ee765348b3a9cbdce9ecf8652d35: 59386 bytes
     file: a548e7465627d2bcfc32869bd8449f403bb8bbc4: 134 bytes

Decoded Files
a882/39ee77b1ee765348b3a9cbdce9ecf8652d35 from tags.expo9.exponential.com/tags/Liilas/Ros/ (59386 bytes, 22352 hidden) download

a548/e7465627d2bcfc32869bd8449f403bb8bbc4 from tags.expo9.exponential.com/tags/Liilas/Ros/ (134 bytes) download


a.tribalfusion.com/displayAd.js?dver=0.8&th=24234311848 benign
[nothing detected] (script) a.tribalfusion.com/displayAd.js?dver=0.8&th=24234311848
     status: (referer=tags.expo9.exponential.com/tags/Liilas/Ros/tags.js)saved 677 bytes 3bf356028fd78bcf53b4804855daf4cdfab1441d
     info: [decodingLevel=0] found JavaScript
     file: 3bf356028fd78bcf53b4804855daf4cdfab1441d: 677 bytes

Decoded Files
3bf3/56028fd78bcf53b4804855daf4cdfab1441d from a.tribalfusion.com/displayAd.js?dver=0.8&th=24234311848 (677 bytes, 157 hidden) download


g2.gumgum.com/javascripts/_U_ benign
[nothing detected] (iframe) g2.gumgum.com/javascripts/_U_
     status: (referer=g2.gumgum.com/javascripts/ggv2.js)saved 564 bytes 1b3291d4eea179c84145b2814cb53e6a506ec201
     info: [0] no JavaScript
     file: 1b3291d4eea179c84145b2814cb53e6a506ec201: 564 bytes

Decoded Files
1b32/91d4eea179c84145b2814cb53e6a506ec201 from g2.gumgum.com/javascripts/_U_ (564 bytes, 13 hidden) download