JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 9d071b8a4405d97b3aa44f128612da114dd47871 (Received 2018-10-11 15:15:42, http://www.camwhores.tv/videos/2108114/kocurek-w-staniczku-1c1ea565/ )

URLStatus
www.camwhores.tv/videos/2108114/kocurek-w-staniczku-1c1ea565/ saved 74601 bytes 856f3d2c8583f3a1b70a19f6e7ecef9cdf54f68c

s7.addthis.com/js/250/javascript: status: (referer=s7.addthis.com/js/250/widget.js)

i20.imlive.com/js/plugins/flc.js status: (referer=pcash.imlive.com/releasese/activepage7947.asp?WID=126088867200&LinkID=1036&QueryID=12&promocode=300teen)

cdn.camwhores.tv/js/ status: (referer=cdn.camwhores.tv/js/main.min.js?v=2.0)

pc180101.com/gen/js/bootstrap.bundle.min.js status: (referer=pc180101.com/gen/banner0180.asp?wid=126088867200&linkid=1036&queryid=197&promocode=900230&im=1)

ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js status: (referer=pcash.imlive.com/releasese/activepage7947.asp?WID=126088867200&LinkID=1036&QueryID=12&promocode=300teen)

i20.imlive.com/js/plugins/framework.js?d=10/11/2018 status: (referer=pcash.imlive.com/releasese/activepage7947.asp?WID=126088867200&LinkID=1036&QueryID=12&promocode=300teen)

pc180101.com/gen/js/jquery.texttailor.js status: (referer=pc180101.com/gen/banner0180.asp?wid=126088867200&linkid=1036&queryid=197&promocode=900230&im=1)

j0.pc20160301.com/scripts/jquery.cookies-min.js status: (referer=pcash.imlive.com/releasese/activepage7947.asp?WID=126088867200&LinkID=1036&QueryID=12&promocode=300teen)

i20.imlive.com/js/plugins/framework.js status: (referer=pc180101.com/gen/banner0180.asp?wid=126088867200&linkid=1036&queryid=197&promocode=900230&im=1)

pc180101.com/gen/js/general.js status: (referer=pc180101.com/gen/banner0180.asp?wid=126088867200&linkid=1036&queryid=197&promocode=900230&im=1)

j0.pc20160301.com/scripts/noui/eventlogger.js status: (referer=pcash.imlive.com/releasese/activepage7947.asp?WID=126088867200&LinkID=1036&QueryID=12&promocode=300teen)

cdn.camwhores.tv/js/undefined status: (referer=cdn.camwhores.tv/js/main.min.js?v=2.0)

ajax.googleapis.com/ajax/libs/jquery/1.11.2/jquery.min.js status: (referer=pcash.imlive.com/releasese/activepage7947.asp?WID=126088867200&LinkID=1036&QueryID=12&promocode=300teen)

www.w3.org/2000/svg status: (referer=player.h-cdn.com/loader.js?customer=camwhores)

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
s7.addthis.com/js/250/widget.js benign
[nothing detected] (script) s7.addthis.com/js/250/widget.js
     status: (referer=www.camwhores.tv/videos/2108114/kocurek-w-staniczku-1c1ea565/)saved 358391 bytes 78396bafb9f060e6ede01c7b5e36fe924c4a2427
     info: [iframe] s7.addthis.com/js/250/javascript:
     info: [img] ssl.gstatic.com/images/icons/gplus-
     file: 78396bafb9f060e6ede01c7b5e36fe924c4a2427: 358391 bytes

Decoded Files
7839/6bafb9f060e6ede01c7b5e36fe924c4a2427 from s7.addthis.com/js/250/widget.js (358391 bytes, 2 hidden) download


pc180101.com/gen/banner0180.asp?wid=126088867200&linkid=1036&queryid=197&promocode=900230&im=1 benign
[nothing detected] (iframe) pc180101.com/gen/banner0180.asp?wid=126088867200&linkid=1036&queryid=197&promocode=900230&im=1
     status: (referer=www.camwhores.tv/videos/2108114/kocurek-w-staniczku-1c1ea565/)saved 22095 bytes e20b8d5336b261137600d15e5fa6a2495e291655
     info: [script] ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
     info: [script] i20.imlive.com/js/plugins/framework.js
     info: [script] pc180101.com/gen/js/general.js
     info: [script] pc180101.com/gen/js/bootstrap.bundle.min.js
     info: [script] pc180101.com/gen/js/jquery.texttailor.js
     info: [script] i20.imlive.com/js/plugins/flc.js
     info: [script] j0.pc20160301.com/scripts/jquery.cookies-min.js
     info: [script] j0.pc20160301.com/scripts/noui/eventlogger.js
     info: [script] j1.pc20160301.com/scripts/noui/StatProvider.js
     info: [img] i20.imlive.com/images/8202img2.png
     info: [img] pc180101.com/gen/+$.getResolvedPhoto(photo,
     file: e20b8d5336b261137600d15e5fa6a2495e291655: 22095 bytes

Decoded Files
e20b/8d5336b261137600d15e5fa6a2495e291655 from pc180101.com/gen/banner0180.asp?wid=126088867200&linkid=1036&queryid=197&promocode=900230&im=1 (22095 bytes, 1966 hidden) download


player.h-cdn.com/loader.js?customer=camwhores benign
[nothing detected] (script) player.h-cdn.com/loader.js?customer=camwhores
     status: (referer=www.camwhores.tv/videos/2108114/kocurek-w-staniczku-1c1ea565/)saved 1968871 bytes 21e98ecbc49ca7cd7faf7ac3c7007cab2e7ed200
     info: [javascript variable] URL=www.w3.org/2000/svg
     info: [decodingLevel=0] found JavaScript
     suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
     file: 21e98ecbc49ca7cd7faf7ac3c7007cab2e7ed200: 1968871 bytes
     file: a1973467b3eb5c4954f63e4c477d35fa2df9a196: 1969115 bytes
     file: ad233e1d158c290c56a5fc5f318277633ecec237: 1969121 bytes
     file: 5f002ee9979b4187a1f46fe7c8e2b7c4e11a0ba8: 1969330 bytes
     file: a145c23e1b31c8d2d24ad1345a6c75d52eb56597: 1969522 bytes
     file: 31fdc55e56761a83c0dcc7419a3ee301dc307bcb: 1969236 bytes
     file: 816417e21d0c4cc8910184d4f1ed3bc51ff411b4: 1969360 bytes

Decoded Files
21e9/8ecbc49ca7cd7faf7ac3c7007cab2e7ed200 from player.h-cdn.com/loader.js?customer=camwhores (1968871 bytes, 2150 hidden) download

a197/3467b3eb5c4954f63e4c477d35fa2df9a196 from player.h-cdn.com/loader.js?customer=camwhores (1969115 bytes, 2150 hidden) download

ad23/3e1d158c290c56a5fc5f318277633ecec237 from player.h-cdn.com/loader.js?customer=camwhores (1969121 bytes, 2150 hidden) download

5f00/2ee9979b4187a1f46fe7c8e2b7c4e11a0ba8 from player.h-cdn.com/loader.js?customer=camwhores (1969330 bytes, 2150 hidden) download

a145/c23e1b31c8d2d24ad1345a6c75d52eb56597 from player.h-cdn.com/loader.js?customer=camwhores (1969522 bytes, 2150 hidden) download

31fd/c55e56761a83c0dcc7419a3ee301dc307bcb from player.h-cdn.com/loader.js?customer=camwhores (1969236 bytes, 2150 hidden) download

8164/17e21d0c4cc8910184d4f1ed3bc51ff411b4 from player.h-cdn.com/loader.js?customer=camwhores (1969360 bytes, 2150 hidden) download


www.camsoda1.com/promos/iframe/cw.php?id=securom&cmp=tv&bgcolor=transparent&txtcolor=fff&brandbgcolor=fc4246&brandtxtcolor=fff benign
[nothing detected] (iframe) www.camsoda1.com/promos/iframe/cw.php?id=securom&cmp=tv&bgcolor=transparent&txtcolor=fff&brandbgcolor=fc4246&brandtxtcolor=fff
     status: (referer=www.camwhores.tv/videos/2108114/kocurek-w-staniczku-1c1ea565/)saved 10669 bytes 5b4344d0e08caaf486dd698fca6258d62e969e85
     info: [img] www.camsoda1.com/promos/iframe/400x300-transparent.png
     info: [0] no JavaScript
     file: 5b4344d0e08caaf486dd698fca6258d62e969e85: 10669 bytes

Decoded Files
5b43/44d0e08caaf486dd698fca6258d62e969e85 from www.camsoda1.com/promos/iframe/cw.php?id=securom&cmp=tv&bgcolor=transparent&txtcolor=fff&brandbgcolor=fc4246&brandtxtcolor=fff (10669 bytes, 1284 hidden) download


www.camwhores.tv/videos/2108114/kocurek-w-staniczku-1c1ea565/ benign
[nothing detected] www.camwhores.tv/videos/2108114/kocurek-w-staniczku-1c1ea565/
     status: (referer=http:/www.ask.com/web?q=puppies)saved 74601 bytes 856f3d2c8583f3a1b70a19f6e7ecef9cdf54f68c
     info: [script] ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js
     info: [script] player.h-cdn.com/loader.js?customer=camwhores
     info: [script] s7.addthis.com/js/250/widget.js
     info: [iframe] pc180101.com/gen/banner0180.asp?wid=126088867200&linkid=1036&queryid=197&promocode=900230&im=1
     info: [iframe] pcash.imlive.com/releasese/activepage7947.asp?WID=126088867200&LinkID=1036&QueryID=12&promocode=300teen
     info: [img] cdn.camwhores.tv/contents/screenshots/2108000/2108114/preview.mp4.jpg
     info: [iframe] www.camsoda1.com/promos/iframe/cw.php?id=securom&cmp=tv&bgcolor=transparent&txtcolor=fff&brandbgcolor=fc4246&brandtxtcolor=fff
     info: [img] cdn.camwhores.tv/contents/avatars/515000/515243.png
     info: [img] www.camwhores.tv/captcha/comments/?rand=1539271397
     info: [img] m1.nsimg.net/media/8/3/9/8390077.jpg
     info: [img] m1.nsimg.net/media/7/4/0/7406655.jpg
     info: [img] m1.nsimg.net/media/8/0/9/8091096.jpg
     info: [img] m1.nsimg.net/media/snap/38558751.jpg
     info: [img] m1.nsimg.net/media/8/3/1/8317136.jpg
     info: [img] m1.nsimg.net/media/8/2/0/8202566.jpg
     info: [img] m1.nsimg.net/media/8/3/3/8335666.jpg
     info: [img] m1.nsimg.net/media/8/0/2/8024668.jpg
     info: [img] m1.nsimg.net/media/8/3/2/8321296.jpg
     info: [img] m1.nsimg.net/media/7/7/9/7794757.jpg
     info: [img] m1.nsimg.net/media/8/0/7/8073244.jpg
     info: [img] m1.nsimg.net/media/8/0/8/8087478.jpg
     info: [script] cdn.camwhores.tv/js/main.min.js?v=2.0
     info: [decodingLevel=0] found JavaScript
     error: line:158: SyntaxError: missing ; after for-loop condition:
          error: line:158: ),''+_wm.random(),_wm.format.popunder.config);if(w){w.blur();window.focus()}},}},occupy:function(a){if(!a){a=['mousedown','mouseup']}for(var i=0;i<a.length>8)e.stopImmediatePropagation()})}},registerTrigger:function(){if(_wm.format.popunder.isTriggered
          error: line:158: ................................................................................................................................................................^
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE html>
          error: line:3: ..............^
     file: 856f3d2c8583f3a1b70a19f6e7ecef9cdf54f68c: 74601 bytes

Decoded Files
856f/3d2c8583f3a1b70a19f6e7ecef9cdf54f68c from www.camwhores.tv/videos/2108114/kocurek-w-staniczku-1c1ea565/ (74601 bytes, 7840 hidden) download


pcash.imlive.com/releasese/activepage7947.asp?WID=126088867200&LinkID=1036&QueryID=12&promocode=300teen benign
[nothing detected] (iframe) pcash.imlive.com/releasese/activepage7947.asp?WID=126088867200&LinkID=1036&QueryID=12&promocode=300teen
     status: (referer=www.camwhores.tv/videos/2108114/kocurek-w-staniczku-1c1ea565/)saved 5910 bytes 938340cfcf07d8e719e35454988f2746516bca57
     info: [script] ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js
     info: [script] i20.imlive.com/js/plugins/framework.js?d=10/11/2018
     info: [script] i20.imlive.com/js/plugins/flc.js
     info: [img] i20.imlive.com/images/activepage7947_chat.gif
     info: [img] i20.imlive.com/images/activepage7947_stars.png
     info: [img] i20.imlive.com/images/activepage7947_but.png
     info: [script] ajax.googleapis.com/ajax/libs/jquery/1.11.2/jquery.min.js
     info: [script] j0.pc20160301.com/scripts/jquery.cookies-min.js
     info: [script] j0.pc20160301.com/scripts/noui/eventlogger.js
     info: [script] j1.pc20160301.com/scripts/noui/StatProvider.js
     info: [decodingLevel=0] found JavaScript
     error: undefined variable $
     error: undefined function $.loadHostsArray
     error: line:12: SyntaxError: missing } in XML expression:
          error: line:12:                     background-color: transparent;
          error: line:12: ................................................^
     file: 938340cfcf07d8e719e35454988f2746516bca57: 5910 bytes

Decoded Files
9383/40cfcf07d8e719e35454988f2746516bca57 from pcash.imlive.com/releasese/activepage7947.asp?WID=126088867200&LinkID=1036&QueryID=12&promocode=300teen (5910 bytes, 1152 hidden) download


cdn.camwhores.tv/js/main.min.js?v=2.0 benign
[nothing detected] (script) cdn.camwhores.tv/js/main.min.js?v=2.0
     status: (referer=www.camwhores.tv/videos/2108114/kocurek-w-staniczku-1c1ea565/)saved 185485 bytes 4b1f525529a56a880f1f9633fd7e3ddf184f1b26
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [iframe] cdn.camwhores.tv/js/
     info: [img] cdn.camwhores.tv/js/{href}
     info: [embed] cdn.camwhores.tv/js/
     info: [decodingLevel=0] found JavaScript
     error: undefined function d.getElementsByTagName
     error: undefined variable d
     info: [element] URL=cdn.camwhores.tv/js/undefined
     info: [1] no JavaScript
     file: 4b1f525529a56a880f1f9633fd7e3ddf184f1b26: 185485 bytes
     file: d5dba94a76a67a54f2b98b16227da20414542fd9: 72 bytes

Decoded Files
4b1f/525529a56a880f1f9633fd7e3ddf184f1b26 from cdn.camwhores.tv/js/main.min.js?v=2.0 (185485 bytes) download

d5db/a94a76a67a54f2b98b16227da20414542fd9 from cdn.camwhores.tv/js/main.min.js?v=2.0 (72 bytes) download


ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js benign
[nothing detected] (script) ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js
     status: (referer=www.camwhores.tv/videos/2108114/kocurek-w-staniczku-1c1ea565/)saved 84320 bytes 41b4bfbaa96be6d1440db6e78004ade1c134e276
     info: [decodingLevel=0] found JavaScript
     error: undefined variable n
     file: 41b4bfbaa96be6d1440db6e78004ade1c134e276: 84320 bytes

Decoded Files
41b4/bfbaa96be6d1440db6e78004ade1c134e276 from ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js (84320 bytes) download


j1.pc20160301.com/scripts/noui/StatProvider.js benign
[nothing detected] (script) j1.pc20160301.com/scripts/noui/StatProvider.js
     status: (referer=pcash.imlive.com/releasese/activepage7947.asp?WID=126088867200&LinkID=1036&QueryID=12&promocode=300teen)saved 6737 bytes 8babb2610699ca52ae939f03be624e968ac776a5
     file: 8babb2610699ca52ae939f03be624e968ac776a5: 6737 bytes

Decoded Files
8bab/b2610699ca52ae939f03be624e968ac776a5 from j1.pc20160301.com/scripts/noui/StatProvider.js (6737 bytes, 2518 hidden) download


ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js benign
[nothing detected] (script) ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
     status: (referer=pc180101.com/gen/banner0180.asp?wid=126088867200&linkid=1036&queryid=197&promocode=900230&im=1)saved 97163 bytes 5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     file: 5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb: 97163 bytes

Decoded Files
5a9d/cfbef655a2668e78baebeaa8dc6f41d8dabb from ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js (97163 bytes) download