JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 9e2c48aae2c3c9277fa38b63decd4d2a920ba80b (Received 2017-04-21 10:32:52, https://totalhash.cymru.com/ )

URLStatus
totalhash.cymru.com/ saved 13311 bytes 44e2cb4b5b74fb2a48aa769b3a3e11a0160913e9

totalhash.cymru.com/wp-content/plugins/jquery-collapse-o-matic/js/collapse.js?ver=1.5.16 status: (referer=totalhash.cymru.com/)

totalhash.cymru.com/wp-content/themes/Totalhash/js/html5.js status: (referer=totalhash.cymru.com/)

totalhash.cymru.com/search/? status: (referer=totalhash.cymru.com/)

totalhash.cymru.com/wp-includes/js/wp-embed.min.js?ver=4.4.2 status: (referer=totalhash.cymru.com/)

totalhash.cymru.com/wp-content/themes/Totalhash/js/navigation.js?ver=1.0 status: (referer=totalhash.cymru.com/)

totalhash.cymru.com/wp-content/plugins/contact-form-7/includes/js/ status: (referer=totalhash.cymru.com/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-2014.06.20)

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
totalhash.cymru.com/undefined benign
[nothing detected] (element) totalhash.cymru.com/undefined
     status: (referer=totalhash.cymru.com/)saved 10464 bytes 9e4005d2abf7a59e374efc8d8d9b23b1ed0ae4f4
     info: [script] totalhash.cymru.com/wp-content/themes/Totalhash/js/html5.js
     info: [script] totalhash.cymru.com/wp-includes/js/jquery/jquery.js?ver=1.11.3
     info: [script] totalhash.cymru.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1
     info: [script] totalhash.cymru.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.4.9
     info: [script] ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js
     info: [script] totalhash.cymru.com/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-2014.06.20
     info: [script] totalhash.cymru.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.2.2
     info: [script] totalhash.cymru.com/wp-content/plugins/jquery-collapse-o-matic/js/collapse.js?ver=1.5.16
     info: [script] totalhash.cymru.com/wp-content/themes/Totalhash/js/navigation.js?ver=1.0
     info: [script] totalhash.cymru.com/wp-includes/js/wp-embed.min.js?ver=4.4.2
     file: 9e4005d2abf7a59e374efc8d8d9b23b1ed0ae4f4: 10464 bytes

Decoded Files
9e40/05d2abf7a59e374efc8d8d9b23b1ed0ae4f4 from totalhash.cymru.com/undefined (10464 bytes, 237 hidden) download


s3.amazonaws.com/downloads.mailchimp.com/js/signup-forms/popup/embed.js benign
[nothing detected] (script) s3.amazonaws.com/downloads.mailchimp.com/js/signup-forms/popup/embed.js
     status: (referer=totalhash.cymru.com/)saved 128948 bytes c47e0968ebde9d9584c7f3c36fc8b1e84805edc7
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     file: c47e0968ebde9d9584c7f3c36fc8b1e84805edc7: 128948 bytes

Decoded Files
c47e/0968ebde9d9584c7f3c36fc8b1e84805edc7 from s3.amazonaws.com/downloads.mailchimp.com/js/signup-forms/popup/embed.js (128948 bytes) download


totalhash.cymru.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.4.9 benign
[nothing detected] (script) totalhash.cymru.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.4.9
     status: (referer=totalhash.cymru.com/)saved 1190 bytes 20356ff29e36bc157b33441fba17d74f9c78901e
     file: 20356ff29e36bc157b33441fba17d74f9c78901e: 1190 bytes

Decoded Files
2035/6ff29e36bc157b33441fba17d74f9c78901e from totalhash.cymru.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.4.9 (1190 bytes) download


totalhash.cymru.com/wp-includes/js/jquery/jquery.js?ver=1.11.3 benign
[nothing detected] (script) totalhash.cymru.com/wp-includes/js/jquery/jquery.js?ver=1.11.3
     status: (referer=totalhash.cymru.com/)saved 95977 bytes c06b7f0b1526037bcdc6639244c9692e2ef3ebdd
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     file: c06b7f0b1526037bcdc6639244c9692e2ef3ebdd: 95977 bytes

Decoded Files
c06b/7f0b1526037bcdc6639244c9692e2ef3ebdd from totalhash.cymru.com/wp-includes/js/jquery/jquery.js?ver=1.11.3 (95977 bytes) download


totalhash.cymru.com/ benign
[nothing detected] totalhash.cymru.com/
     status: (referer=http:/www.ask.com/web?q=puppies)saved 13311 bytes 44e2cb4b5b74fb2a48aa769b3a3e11a0160913e9
     info: [javascript variable] URL=totalhash.cymru.com/search/?
     info: [script] totalhash.cymru.com/wp-content/themes/Totalhash/js/html5.js
     info: [script] totalhash.cymru.com/wp-includes/js/jquery/jquery.js?ver=1.11.3
     info: [script] totalhash.cymru.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1
     info: [script] totalhash.cymru.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.4.9
     info: [script] ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js
     info: [script] www.google.com/jsapi
     info: [script] s3.amazonaws.com/downloads.mailchimp.com/js/signup-forms/popup/embed.js
     info: [script] totalhash.cymru.com/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-2014.06.20
     info: [script] totalhash.cymru.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.2.2
     info: [script] totalhash.cymru.com/wp-content/plugins/jquery-collapse-o-matic/js/collapse.js?ver=1.5.16
     info: [script] totalhash.cymru.com/wp-content/themes/Totalhash/js/navigation.js?ver=1.0
     info: [script] totalhash.cymru.com/wp-includes/js/wp-embed.min.js?ver=4.4.2
     info: [decodingLevel=0] found JavaScript
     error: undefined function b.attachEvent
     error: undefined variable b
     info: [element] URL=totalhash.cymru.com/undefined
     info: [1] no JavaScript
     file: 44e2cb4b5b74fb2a48aa769b3a3e11a0160913e9: 13311 bytes
     file: 728f086527819cb673400ab973b2dca044e203e2: 300 bytes

Decoded Files
44e2/cb4b5b74fb2a48aa769b3a3e11a0160913e9 from totalhash.cymru.com/ (13311 bytes, 277 hidden) download

728f/086527819cb673400ab973b2dca044e203e2 from totalhash.cymru.com/ (300 bytes) download


ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js benign
[nothing detected] (script) ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js
     status: (referer=totalhash.cymru.com/)saved 93100 bytes e2f3603e23711f6446f278a411d905623d65201e
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [decodingLevel=0] found JavaScript
     error: undefined variable f
     suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
     file: e2f3603e23711f6446f278a411d905623d65201e: 93100 bytes
     file: be32033dffb2fa584cb49a38cbfd0ee3fd386a75: 93500 bytes
     file: 18867f73382caeb6885ed2db49e6488fa8404269: 93613 bytes

Decoded Files
e2f3/603e23711f6446f278a411d905623d65201e from ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js (93100 bytes) download

be32/033dffb2fa584cb49a38cbfd0ee3fd386a75 from ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js (93500 bytes) download

1886/7f73382caeb6885ed2db49e6488fa8404269 from ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js (93613 bytes) download


www.google.com/jsapi benign
[nothing detected] (script) www.google.com/jsapi
     status: (referer=totalhash.cymru.com/)saved 24856 bytes 2fbf7989e2273779a182edca83ae00b6d61bd3e2
     info: [script] :
     info: [script] www.google.com/
     info: [decodingLevel=0] found JavaScript
     file: 2fbf7989e2273779a182edca83ae00b6d61bd3e2: 24856 bytes

Decoded Files
2fbf/7989e2273779a182edca83ae00b6d61bd3e2 from www.google.com/jsapi (24856 bytes) download


totalhash.cymru.com/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-2014.06.20 benign
[nothing detected] (script) totalhash.cymru.com/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-2014.06.20
     status: (referer=totalhash.cymru.com/)saved 15248 bytes 374aa1f8db17575b0e35eabc46ad82062e09106c
     info: [iframe] totalhash.cymru.com/wp-content/plugins/contact-form-7/includes/js/
     info: [decodingLevel=0] found JavaScript
     error: undefined function e
     file: 374aa1f8db17575b0e35eabc46ad82062e09106c: 15248 bytes

Decoded Files
374a/a1f8db17575b0e35eabc46ad82062e09106c from totalhash.cymru.com/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-2014.06.20 (15248 bytes) download


totalhash.cymru.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.2.2 benign
[nothing detected] (script) totalhash.cymru.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.2.2
     status: (referer=totalhash.cymru.com/)saved 11200 bytes 2c69685855da5ab49da766318d0eb959da615308
     info: [decodingLevel=0] found JavaScript
     error: undefined variable jQuery
     error: undefined function $.extend
     error: undefined variable $
     file: 2c69685855da5ab49da766318d0eb959da615308: 11200 bytes

Decoded Files
2c69/685855da5ab49da766318d0eb959da615308 from totalhash.cymru.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.2.2 (11200 bytes, 1113 hidden) download


totalhash.cymru.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1 benign
[nothing detected] (script) totalhash.cymru.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1
     status: (referer=totalhash.cymru.com/)saved 7200 bytes 875bce76a77590c3c438bbc6e014b39c23c8c88d
     info: [decodingLevel=0] found JavaScript
     error: undefined variable jQuery
     error: undefined function e
     file: 875bce76a77590c3c438bbc6e014b39c23c8c88d: 7200 bytes

Decoded Files
875b/ce76a77590c3c438bbc6e014b39c23c8c88d from totalhash.cymru.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1 (7200 bytes, 1 hidden) download