JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link be942acab5c447aade81a08ed0a5b3d57c8110d4 (Received 2013-09-14 11:12:53, filesify.com/T2BGBe )

URLStatus
filesify.com/T2BGBe saved 9844 bytes eaf637237fefe7859d8b8d99a6789dee0f30e10b

ajax.googleapis.com/ajax/libs/jquery/1.3.2/jquery.min.js status: (referer=www.adworkmedia.com/)

adworkmedia.com/min/?f=js/jquery.divroller.js status: (referer=www.adworkmedia.com/)

www.adworkmedia.com/js/html5.js status: (referer=www.adworkmedia.com/)

www.adworkmedia.com/js/jquery.fittext.js status: (referer=www.adworkmedia.com/)

ajax.googleapis.com/ajax/libs/jqueryui/1.7.2/jquery-ui.min.js status: (referer=www.adworkmedia.com/)

www.facebook.com/plugins/like.php?href=http:/www.facebook.com/adworkmedia&send=false&layout=count&width=450&faces=false&action=like&colorscheme=light&font&height=21 status: (referer=www.adworkmedia.com/)

adworkmedia.com/js/jwplayer.js status: (referer=www.adworkmedia.com/)

apis.google.com/js/plusone.js status: (referer=www.adworkmedia.com/)

www.adworkmedia.com/js/jquery.lettering.js status: (referer=www.adworkmedia.com/)

www.adworkmedia.com/js/jquery.textillate.js status: (referer=www.adworkmedia.com/)

All Malicious or Suspicious Elements of Submission

None
filesify.com/js/jquery-1.3.2.min.js benign
[nothing detected] (script) filesify.com/js/jquery-1.3.2.min.js
     status: (referer=filesify.com/T2BGBe)saved 339 bytes c04f8a3471c34399aa4c97ec8c905267d2728c7f
     info: [0] no JavaScript
     file: c04f8a3471c34399aa4c97ec8c905267d2728c7f: 339 bytes

Decoded Files
c04f/8a3471c34399aa4c97ec8c905267d2728c7f from filesify.com/js/jquery-1.3.2.min.js (339 bytes) download


www.adworkmedia.com/ benign
[nothing detected] (var box) www.adworkmedia.com/
     status: (referer=www.adworkmedia.com/gLoader.php?GID=4703&pubID=6736&go=&sid=)saved 28049 bytes f522d930a229f392076d743894f8050f3ff53314
     info: [script] ajax.googleapis.com/ajax/libs/jquery/1.3.2/jquery.min.js
     info: [script] ajax.googleapis.com/ajax/libs/jqueryui/1.7.2/jquery-ui.min.js
     info: [script] www.adworkmedia.com/js/html5.js
     info: [script] www.adworkmedia.com/js/adwork-ie7.js
     info: [img] www.adworkmedia.com/imagebox/AWM_logo.png
     info: [input] www.adworkmedia.com/imagebox/login.jpg
     info: [img] www.adworkmedia.com/publisher/img/track.png
     info: [img] www.adworkmedia.com/publisher/img/small.png
     info: [img] www.adworkmedia.com/publisher/img/earnings.png
     info: [img] www.adworkmedia.com/images/campaigns.png
     info: [img] www.adworkmedia.com/images/platform.png
     info: [img] www.adworkmedia.com/images/webmasters.png
     info: [img] www.adworkmedia.com/images/advertisers.png
     info: [img] www.adworkmedia.com/images/testimonial.png
     info: [img] www.adworkmedia.com/images/bg-arrow.png
     info: [script] apis.google.com/js/plusone.js
     info: [img] www.adworkmedia.com/imagebox/block.png
     info: [img] www.adworkmedia.com/images/socialTwitter.png
     info: [img] www.adworkmedia.com/images/socialFacebook.png
     info: [iframe] www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2Fadworkmedia&send=false&layout=count&width=450&faces=false&action=like&colorscheme=light&font&height=21
     info: [img] www.adworkmedia.com/images/AWM_PMA_small.png
     info: [script] adworkmedia.com/js/jwplayer.js
     info: [script] adworkmedia.com/min/?f=js/jquery.divroller.js
     info: [script] www.adworkmedia.com/js/jquery.fittext.js
     info: [script] www.adworkmedia.com/js/jquery.lettering.js
     info: [script] www.adworkmedia.com/js/jquery.textillate.js
     info: [decodingLevel=0] found JavaScript
     error: undefined variable s
     info: [element] URL=www.google-analytics.com/ga.js
     info: [1] no JavaScript
     file: f522d930a229f392076d743894f8050f3ff53314: 28049 bytes
     file: 5809d3145354164e801df9c79cfd04f441bb2a83: 103 bytes

Decoded Files
f522/d930a229f392076d743894f8050f3ff53314 from www.adworkmedia.com/ (28049 bytes, 7196 hidden) download

5809/d3145354164e801df9c79cfd04f441bb2a83 from www.adworkmedia.com/ (103 bytes) download


filesify.com/T2BGBe benign
[nothing detected] filesify.com/T2BGBe
     status: (referer=www.google.com/trends/hottrends)saved 9844 bytes eaf637237fefe7859d8b8d99a6789dee0f30e10b
     info: [meta refresh] URL=www.adworkmedia.com/help/enableJS.php
     info: [script] filesify.com/js/jquery-1.3.2.min.js
     info: [script] filesify.com/js/jquery.prettyPhoto.js
     info: [script] filesify.com/js/tipsy.js
     info: [script] www.adworkmedia.com/gLoader.php?GID=4703&pubID=6736&go=&sid=
     info: [img] filesify.com/img/logo.png
     info: [img] filesify.com/img/Password.txt.png
     info: [img] filesify.com/img/large.png
     info: [img] filesify.com/img/reviews.png
     info: [img] filesify.com/img/logo.png
     info: [img] filesify.com/img/facebook.png
     info: [img] filesify.com/img/email.png
     info: [decodingLevel=0] found JavaScript
     error: undefined variable $
     error: undefined function $
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE html PUBLIC "-/W3C/DTD XHTML 1.0 Transitional/EN" "http:/www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
          error: line:3: ...............^
     file: eaf637237fefe7859d8b8d99a6789dee0f30e10b: 9844 bytes

Decoded Files
eaf6/37237fefe7859d8b8d99a6789dee0f30e10b from filesify.com/T2BGBe (9844 bytes, 1325 hidden) download


www.google-analytics.com/ga.js benign
[nothing detected] (element) www.google-analytics.com/ga.js
     status: (referer=www.adworkmedia.com/help/enableJS.php)saved 39867 bytes e8907e8adf53abead5c4398b03498acb35bd9bf2
     info: [decodingLevel=0] found JavaScript
     file: e8907e8adf53abead5c4398b03498acb35bd9bf2: 39867 bytes

Decoded Files
e890/7e8adf53abead5c4398b03498acb35bd9bf2 from www.google-analytics.com/ga.js (39867 bytes) download


www.adworkmedia.com/help/enableJS.php benign
[nothing detected] (metarefresh) www.adworkmedia.com/help/enableJS.php
     status: (referer=filesify.com/T2BGBe)saved 5984 bytes 7874163e99ba4cc490cba4c4e4bbd262f0c8b1fc
     info: [img] www.adworkmedia.com/imagebox/bottom.jpg
     info: [decodingLevel=0] found JavaScript
     error: undefined variable s
     info: [element] URL=www.google-analytics.com/ga.js
     info: [1] no JavaScript
     file: 7874163e99ba4cc490cba4c4e4bbd262f0c8b1fc: 5984 bytes
     file: 5809d3145354164e801df9c79cfd04f441bb2a83: 103 bytes

Decoded Files
7874/163e99ba4cc490cba4c4e4bbd262f0c8b1fc from www.adworkmedia.com/help/enableJS.php (5984 bytes, 1545 hidden) download

5809/d3145354164e801df9c79cfd04f441bb2a83 from www.adworkmedia.com/help/enableJS.php (103 bytes) download


filesify.com/js/jquery.prettyPhoto.js benign
[nothing detected] (script) filesify.com/js/jquery.prettyPhoto.js
     status: (referer=filesify.com/T2BGBe)saved 341 bytes 720d13b4aa2c0368da177da59e1a15766f1a7f69
     info: [0] no JavaScript
     file: 720d13b4aa2c0368da177da59e1a15766f1a7f69: 341 bytes

Decoded Files
720d/13b4aa2c0368da177da59e1a15766f1a7f69 from filesify.com/js/jquery.prettyPhoto.js (341 bytes) download


www.adworkmedia.com/gLoader.php?GID=4703&pubID=6736&go=&sid= benign
[nothing detected] (script) www.adworkmedia.com/gLoader.php?GID=4703&pubID=6736&go=&sid=
     status: (referer=filesify.com/T2BGBe)saved 11337 bytes d2fc0cb270e73d5a973e296f511df8ad58fd0520
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [decodingLevel=0] found JavaScript
     error: undefined variable document.getElementsByTagName("body")[0]
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var document.getElementsByTagName("body")[0] = 1;
          error: line:1: ....^
     info: DecodedIframe detected
     info: [javascript variable] URL=www.linkz.it/DMCA.php
     info: [var box] URL=www.adworkmedia.com/
     info: [var dURL] URL=www.linkz.it/DMCA.php
     info: [var newurl] URL=www.linkz.it/DMCA.php
     info: [decodingLevel=1] found JavaScript
     error: line:12: SyntaxError: missing } in XML expression:
          error: line:12: <style type="text/css"> #druajx1wso3i5mtbzk { position:absolute; display:none; top:0;left:0; width:100%; z-index:1999002; background-color:#000000; filter:alpha(opacity=70); opacity:0.70; -moz-opacity:0.70; } #dN4703 { position:fixed; bottom:7px; le
          error: line:12: ......................................................^
     file: d2fc0cb270e73d5a973e296f511df8ad58fd0520: 11337 bytes
     file: 8ebc721889979008e7858f53547ba051100a43ad: 10125 bytes

Decoded Files
d2fc/0cb270e73d5a973e296f511df8ad58fd0520 from www.adworkmedia.com/gLoader.php?GID=4703&pubID=6736&go=&sid= (11337 bytes, 294 hidden) download

8ebc/721889979008e7858f53547ba051100a43ad from www.adworkmedia.com/gLoader.php?GID=4703&pubID=6736&go=&sid= (10125 bytes) download


filesify.com/js/tipsy.js benign
[nothing detected] (script) filesify.com/js/tipsy.js
     status: (referer=filesify.com/T2BGBe)saved 328 bytes e429bc276f01eac59db5992e7709fd7ed07fedac
     info: [0] no JavaScript
     file: e429bc276f01eac59db5992e7709fd7ed07fedac: 328 bytes

Decoded Files
e429/bc276f01eac59db5992e7709fd7ed07fedac from filesify.com/js/tipsy.js (328 bytes) download


www.adworkmedia.com/js/adwork-ie7.js benign
[nothing detected] (script) www.adworkmedia.com/js/adwork-ie7.js
     status: (referer=www.adworkmedia.com/)saved 249 bytes 58ecddf13bf8d6d1f077703fa97e1bb6e989dc4e
     info: [decodingLevel=0] found JavaScript
     error: undefined variable jQuery
     error: undefined function jQuery
     file: 58ecddf13bf8d6d1f077703fa97e1bb6e989dc4e: 249 bytes

Decoded Files
58ec/ddf13bf8d6d1f077703fa97e1bb6e989dc4e from www.adworkmedia.com/js/adwork-ie7.js (249 bytes, 62 hidden) download


www.linkz.it/DMCA.php benign
[nothing detected] (var newurl) www.linkz.it/DMCA.php
     status: (referer=www.adworkmedia.com/gLoader.php?GID=4703&pubID=6736&go=&sid=)saved 4360 bytes d40827f54e30ab1b1045e3f3375d8ed4ddd01b1c
     info: [0] no JavaScript
     file: d40827f54e30ab1b1045e3f3375d8ed4ddd01b1c: 4360 bytes

Decoded Files
d408/27f54e30ab1b1045e3f3375d8ed4ddd01b1c from www.linkz.it/DMCA.php (4360 bytes, 240 hidden) download