JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link be942acab5c447aade81a08ed0a5b3d57c8110d4 (Received 2013-09-14 11:12:53, filesify.com/T2BGBe )

URLStatus
filesify.com/T2BGBe saved 9844 bytes eaf637237fefe7859d8b8d99a6789dee0f30e10b

ajax.googleapis.com/ajax/libs/jquery/1.3.2/jquery.min.js status: (referer=www.adworkmedia.com/)

adworkmedia.com/min/?f=js/jquery.divroller.js status: (referer=www.adworkmedia.com/)

www.adworkmedia.com/js/html5.js status: (referer=www.adworkmedia.com/)

www.adworkmedia.com/js/jquery.fittext.js status: (referer=www.adworkmedia.com/)

ajax.googleapis.com/ajax/libs/jqueryui/1.7.2/jquery-ui.min.js status: (referer=www.adworkmedia.com/)

www.facebook.com/plugins/like.php?href=http:/www.facebook.com/adworkmedia&send=false&layout=count&width=450&faces=false&action=like&colorscheme=light&font&height=21 status: (referer=www.adworkmedia.com/)

adworkmedia.com/js/jwplayer.js status: (referer=www.adworkmedia.com/)

apis.google.com/js/plusone.js status: (referer=www.adworkmedia.com/)

www.adworkmedia.com/js/jquery.lettering.js status: (referer=www.adworkmedia.com/)

www.adworkmedia.com/js/jquery.textillate.js status: (referer=www.adworkmedia.com/)

All Malicious or Suspicious Elements of Submission

None
filesify.com/js/jquery-1.3.2.min.js benign
[nothing detected] (script) filesify.com/js/jquery-1.3.2.min.js
     status: (referer=filesify.com/T2BGBe)saved 339 bytes c04f8a3471c34399aa4c97ec8c905267d2728c7f
     info: [0] no JavaScript
     file: c04f8a3471c34399aa4c97ec8c905267d2728c7f: 339 bytes

Decoded Files
c04f/8a3471c34399aa4c97ec8c905267d2728c7f from filesify.com/js/jquery-1.3.2.min.js (339 bytes) download


www.adworkmedia.com/ benign
[nothing detected] (var box) www.adworkmedia.com/
     status: (referer=www.adworkmedia.com/gLoader.php?GID=4703&pubID=6736&go=&sid=)saved 28049 bytes f522d930a229f392076d743894f8050f3ff53314
     info: [script] ajax.googleapis.com/ajax/libs/jquery/1.3.2/jquery.min.js
     info: [script] ajax.googleapis.com/ajax/libs/jqueryui/1.7.2/jquery-ui.min.js
     info: [script] www.adworkmedia.com/js/html5.js
     info: [script] www.adworkmedia.com/js/adwork-ie7.js
     info: [img] www.adworkmedia.com/imagebox/AWM_logo.png
     info: [input] www.adworkmedia.com/imagebox/login.jpg
     info: [img] www.adworkmedia.com/publisher/img/track.png
     info: [img] www.adworkmedia.com/publisher/img/small.png
     info: [img] www.adworkmedia.com/publisher/img/earnings.png
     info: [img] www.adworkmedia.com/images/campaigns.png
     info: [img] www.adworkmedia.com/images/platform.png
     info: [img] www.adworkmedia.com/images/webmasters.png
     info: [img] www.adworkmedia.com/images/advertisers.png
     info: [img] www.adworkmedia.com/images/testimonial.png
     info: [img] www.adworkmedia.com/images/bg-arrow.png
     info: [script] apis.google.com/js/plusone.js
     info: [img] www.adworkmedia.com/imagebox/block.png
     info: [img] www.adworkmedia.com/images/socialTwitter.png
     info: [img] www.adworkmedia.com/images/socialFacebook.png
     info: [iframe] www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2Fadworkmedia&send=false&layout=count&width=450&faces=false&action=like&colorscheme=light&font&height=21
     info: [img] www.adworkmedia.com/images/AWM_PMA_small.png
     info: [script] adworkmedia.com/js/jwplayer.js
     info: [script] adworkmedia.com/min/?f=js/jquery.divroller.js
     info: [script] www.adworkmedia.com/js/jquery.fittext.js
     info: [script] www.adworkmedia.com/js/jquery.lettering.js
     info: [script] www.adworkmedia.com/js/jquery.textillate.js
     info: [decodingLevel=0] found JavaScript
     error: undefined variable s
     info: [element] URL=www.google-analytics.com/ga.js
     info: [1] no JavaScript
     file: f522d930a229f392076d743894f8050f3ff53314: 28049 bytes
     file: 5809d3145354164e801df9c79cfd04f441bb2a83: 103 bytes

Decoded Files
f522/d930a229f392076d743894f8050f3ff53314 from www.adworkmedia.com/ (28049 bytes, 7196 hidden) download

5809/d3145354164e801df9c79cfd04f441bb2a83 from www.adworkmedia.com/ (103 bytes) download


filesify.com/T2BGBe benign
[nothing detected] filesify.com/T2BGBe
     status: (referer=www.google.com/trends/hottrends)saved 9844 bytes eaf637237fefe7859d8b8d99a6789dee0f30e10b
     info: [meta refresh] URL=www.adworkmedia.com/help/enableJS.php
     info: [script] filesify.com/js/jquery-1.3.2.min.js
     info: [script] filesify.com/js/jquery.prettyPhoto.js
     info: [script] filesify.com/js/tipsy.js
     info: [script] www.adworkmedia.com/gLoader.php?GID=4703&pubID=6736&go=&sid=
     info: [img] filesify.com/img/logo.png
     info: [img] filesify.com/img/Password.txt.png
     info: [img] filesify.com/img/large.png
     info: [img] filesify.com/img/reviews.png
     info: [img] filesify.com/img/logo.png
     info: [img] filesify.com/img/facebook.png
     info: [img] filesify.com/img/email.png
     info: [decodingLevel=0] found JavaScript
     error: undefined variable $
     error: undefined function $
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE html PUBLIC "-/W3C/DTD XHTML 1.0 Transitional/EN" "http:/www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
          error: line:3: ...............^
     file: eaf637237fefe7859d8b8d99a6789dee0f30e10b: 9844 bytes

Decoded Files
eaf6/37237fefe7859d8b8d99a6789dee0f30e10b from filesify.com/T2BGBe (9844 bytes, 1325 hidden) download