JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link b7c63a38126f021173ff56a079799d33f9c4efb7 (Received 2018-10-12 08:58:21, script )

URLStatus

All Malicious or Suspicious Elements of Submission

None
mars.contentssl.com/f benign
[nothing detected] (jsvar) mars.contentssl.com/f
     status: (referer=http:/www.ask.com/web?q=puppies)saved 33 bytes 320f715b64c895362059ccfc0315d2eb65d3ca0b
     info: [0] no JavaScript
     file: 320f715b64c895362059ccfc0315d2eb65d3ca0b: 33 bytes

Decoded Files
320f/715b64c895362059ccfc0315d2eb65d3ca0b from mars.contentssl.com/f (33 bytes) download


script benign
[nothing detected] script
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [javascript variable] URL=mars.contentssl.com/f
     info: [decodingLevel=0] found JavaScript
     info: DecodedMsg detected /info.ActiveXObject Microsoft.XMLHTTP
     info: [open] URL=mars.contentssl.com/f/stats.php
     info: [1] no JavaScript
     file: 6f321f51b82199c0c549f9f637c3e18de30d4f83: 4014 bytes
     file: 047c6a3f6f4a00dd6b76ca405e86cf2f9d4549ee: 102 bytes

Decoded Files
6f32/1f51b82199c0c549f9f637c3e18de30d4f83 from script (4014 bytes, 1102 hidden) download

047c/6a3f6f4a00dd6b76ca405e86cf2f9d4549ee from script (102 bytes) download


mars.contentssl.com/f/stats.php benign
[nothing detected] (open) mars.contentssl.com/f/stats.php
     status: (referer=http:/www.ask.com/web?q=puppies)saved 13 bytes e43b8a0e67783b11d0513bd84372eab9dc7d4abf
     info: [0] no JavaScript
     file: e43b8a0e67783b11d0513bd84372eab9dc7d4abf: 13 bytes

Decoded Files
e43b/8a0e67783b11d0513bd84372eab9dc7d4abf from mars.contentssl.com/f/stats.php (13 bytes) download