JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 54a85194d0add39496e06beede489a147691efae (Received 2012-09-28 03:53:51, http://www.ayiyyaamovietheatricaltrailer.ewebsite.com )

URLStatus
www.ayiyyaamovietheatricaltrailer.ewebsite.com saved 13711 bytes 2b41ec1a779b54a8da772999394fc53811e2d2b9

js.microsoft.com/library/svy/windows/broker.js status: (referer=www.microsoft.com/windows/internet-explorer/beta/features/web-slices.aspx)

www.microsoft.com/en/shared/core/2/js/js.ashx?s=Csp;shared status: (referer=www.microsoft.com/Scripts/3.5/wol.ie6.js)

view.atdmt.com/iaction/UMIRF_FY11_IE9_HPage status: (referer=www.microsoft.com/windows/internet-explorer/beta/features/web-slices.aspx)

res1.windows.microsoft.com/resbox/en/Internet Explorer/main/559c91b6-515b-493a-8d25-c237e569f79.js status: (referer=www.microsoft.com/windows/internet-explorer/beta/features/web-slices.aspx)

view.atdmt.com/jaction/UMIRF_FY11_IE9_HPage status: (referer=www.microsoft.com/windows/internet-explorer/beta/features/web-slices.aspx)

ads1.msn.com/library/dap.js status: (referer=www.microsoft.com/windows/internet-explorer/beta/features/web-slices.aspx)

www.microsoft.com/Scripts/3.5/wol.common.js status: (referer=www.microsoft.com/windows/internet-explorer/beta/features/web-slices.aspx)

www.microsoft.com/Scripts/3.5/webtrends.js status: (referer=www.microsoft.com/windows/internet-explorer/beta/features/web-slices.aspx)

i3.microsoft.com/global/en/us/renderingassets/15_7.js status: (referer=www.microsoft.com/Scripts/3.5/wol.ie6.js)

res2.windows.microsoft.com/resbox/en/Windows 7/main/82c43ef4-0428-4351-9121-dee49d424ce7_85.js status: (referer=www.microsoft.com/windows/internet-explorer/beta/features/web-slices.aspx)

ajax.microsoft.com/ajax/4.0/2/MicrosoftAjax.js status: (referer=www.microsoft.com/windows/internet-explorer/beta/features/web-slices.aspx)

Ads1.msn.com/library/dap.js status: (referer=www.microsoft.com/Scripts/3.5/wol.ie6.js)

ajax.microsoft.com/ajax/jquery/jquery-1.4.2.min.js status: (referer=www.microsoft.com/Scripts/3.5/wol.ie6.js)

www.microsoft.com/en/WebResource.axd?d=tCoVo8B2kuxlKOl5wzF30FvsGeTt7CduKjWtBZz8tM08W2kOSx9-9wbFZ4auucVsQzS3Ijp7ENOKj0sSh6yA--81&t=634776300793002537 status: (referer=www.microsoft.com/Scripts/3.5/wol.ie6.js)

www.microsoft.com/en/us/sitemap.aspx?pf=true status: (referer=www.microsoft.com/Scripts/3.5/wol.ie6.js)

i3.microsoft.com/library/svy/broker.js status: (referer=www.microsoft.com/Scripts/3.5/wol.ie6.js)

www.microsoft.com/en/shared/core/2/js/js.ashx?pt=cspMscomSiteMap&c=cspSearchComponent;cspMscomMasterNavigation status: (referer=www.microsoft.com/Scripts/3.5/wol.ie6.js)

Warning: reading file /storagefiles/a63b//cb3c0e6a7972f84d8be8d90307aac1751477 failed
Warning: reading file /storagefiles/7cd0//2a98a02d485ded8dc07574267cf9f9023130 failed
Warning: reading file /storagefiles/46be//cdc7d74265a7776c60ab0b9748aa19b77f0c failed
Warning: reading file /storagefiles/3cb1//e280c044e5880bf2d514bdd8938fbbf074ca failed
Warning: reading file /storagefiles/8b83//8286e5c8c55f9208788a3195aa16652a7e9b failed
Warning: reading file /storagefiles/8884//a4572e559d870764408e6c221e1fc34de037 failed
Warning: reading file /storagefiles/9e11//cb6af2ca314e33bd943346520b315ec41e76 failed

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
s3c.ewebsite.com/js/ui.js benign
[nothing detected] (script) s3c.ewebsite.com/js/ui.js
     status: (referer=www.ayiyyaamovietheatricaltrailer.ewebsite.com/)saved 163078 bytes 834224ca6d37703a58f30ac9c25e6d5a1eb439ca
     info: [javascript variable] URL=www.microsoft.com/windows/internet-explorer/beta/features/web-slices.aspx
     info: [img] s3c.ewebsite.com/img/tiny/
     info: [embed] s3c.ewebsite.com/js/
     info: [script] s3c.ewebsite.com/js/javascript:void(0)
     info: [decodingLevel=0] found JavaScript
     error: undefined variable root
     info: Decoding option navigator.systemLanguage=en and navigator.systemLanguage=zh-cn and browser=IE7/XP and browser=IE8/Vista and browser=Opera and browser=Firefox,      0 bytes
     info: Decoding option navigator.systemLanguage=en and navigator.systemLanguage=zh-cn and browser=IE7/XP and browser=IE8/Vista and browser=Opera and browser=Firefox,      1570 bytes
     info: [decodingLevel=1] found JavaScript
     file: 834224ca6d37703a58f30ac9c25e6d5a1eb439ca: 163078 bytes
     file: fad4df235a0b64f260c7efbe1cf519e44063c444: 1570 bytes

Decoded Files
8342/24ca6d37703a58f30ac9c25e6d5a1eb439ca from s3c.ewebsite.com/js/ui.js (163078 bytes) download

fad4/df235a0b64f260c7efbe1cf519e44063c444 from s3c.ewebsite.com/js/ui.js (1570 bytes, 414 hidden) download


www.microsoft.com/windows/internet-explorer/beta/features/web-slices.aspx benign
[nothing detected] (jsvar) www.microsoft.com/windows/internet-explorer/beta/features/web-slices.aspx
     status: (referer=s3c.ewebsite.com/js/ui.js)saved 57515 bytes 7f7544f08b9d2a49906a65e457c01ebd2207582c
     info: [img] login.live.com:443/login.srf?wa=wsignin1.0&rpsnv=11&rver=6.1.6206.0&wp=LBI_SSL&wreply=https%3a%2f%2fredir.windows.microsoft.com%2fliveid%3fru%3den-US%252finternet-explorer%252fproducts%252fie%252fhome&lc=1033&id=285275&cbcxt=d10db682284e41afabd0100efcf3b9303be6e51a12b41ab82881f1acdba78e2&mkt=en-US&AJ=1
     info: [img] res2.windows.microsoft.com/resbox/en/Windows%207/main/4300ae64-546c-4bbe-9026-6779b3684fb9_68.png
     info: [img] res1.windows.microsoft.com/Resources/3.5/shared/images/merged/search.png
     info: [script] ajax.microsoft.com/ajax/4.0/2/MicrosoftAjax.js
     info: [script] ajax.aspnetcdn.com/ajax/jQuery/jquery-1.5.2.min.js
     info: [script] www.microsoft.com/Scripts/3.5/code.js
     info: [script] www.microsoft.com/Scripts/3.5/webtrends.js
     info: [script] www.microsoft.com/Scripts/3.5/wol.common.js
     info: [script] js.microsoft.com/library/svy/windows/broker.js
     info: [script] res1.windows.microsoft.com/resbox/en/Internet%20Explorer/main/a8749bf6-15c2-40e5-968b-6911e02f2837.js
     info: [script] res2.windows.microsoft.com/resbox/en/Windows%207/main/82c43ef4-0428-4351-9121-dee49d424ce7_85.js
     info: [script] res1.windows.microsoft.com/resbox/en/Internet%20Explorer/main/559c91b6-515b-493a-8d25-c237e569f79.js
     info: [script] ads1.msn.com/library/dap.js
     info: [img] res1.windows.microsoft.com/resbox/en/Windows
     info: [img] res2.windows.microsoft.com/resbox/en/Windows
     info: [img] res2.windows.microsoft.com/resbox/en/Internet
     info: [img] res1.windows.microsoft.com/resbox/en/Windows%207/main/4300ae64-546c-4bbe-9026-6779b3684fb8_57.png
     info: [img] c.microsoft.com/pixel.asp?MS.js=No
     info: [img] m.webtrends.com/dcsaukzid100008i3dphd16p8b/njs.gif?dcsuri=/nojavascript&WT.js=No
     info: [img] res2.windows.microsoft.com/resources/3.5/shared/images/c.gif
     info: [script] view.atdmt.com/jaction/UMIRF_FY11_IE9_HPage
     info: [iframe] view.atdmt.com/iaction/UMIRF_FY11_IE9_HPage
     info: [script] www.microsoft.com/Scripts/3.5/wol.ie6.js
     info: [decodingLevel=0] found JavaScript
     error: undefined variable window.location.protocol
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var window.location.protocol = 1;
          error: line:1: ....^
     suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
     file: 7f7544f08b9d2a49906a65e457c01ebd2207582c: 57515 bytes
     file: a63bcb3c0e6a7972f84d8be8d90307aac1751477: 358985 bytes
     file: 7cd02a98a02d485ded8dc07574267cf9f9023130: 57815 bytes
     file: 46becdc7d74265a7776c60ab0b9748aa19b77f0c: 57821 bytes
     file: 3cb1e280c044e5880bf2d514bdd8938fbbf074ca: 58030 bytes
     file: 8b838286e5c8c55f9208788a3195aa16652a7e9b: 58222 bytes
     file: 8884a4572e559d870764408e6c221e1fc34de037: 57936 bytes
     file: 9e11cb6af2ca314e33bd943346520b315ec41e76: 58060 bytes

Decoded Files
7f75/44f08b9d2a49906a65e457c01ebd2207582c from www.microsoft.com/windows/internet-explorer/beta/features/web-slices.aspx (57515 bytes, 6280 hidden) download

a63b/cb3c0e6a7972f84d8be8d90307aac1751477 from www.microsoft.com/windows/internet-explorer/beta/features/web-slices.aspx 7cd0/2a98a02d485ded8dc07574267cf9f9023130 from www.microsoft.com/windows/internet-explorer/beta/features/web-slices.aspx 46be/cdc7d74265a7776c60ab0b9748aa19b77f0c from www.microsoft.com/windows/internet-explorer/beta/features/web-slices.aspx 3cb1/e280c044e5880bf2d514bdd8938fbbf074ca from www.microsoft.com/windows/internet-explorer/beta/features/web-slices.aspx 8b83/8286e5c8c55f9208788a3195aa16652a7e9b from www.microsoft.com/windows/internet-explorer/beta/features/web-slices.aspx 8884/a4572e559d870764408e6c221e1fc34de037 from www.microsoft.com/windows/internet-explorer/beta/features/web-slices.aspx 9e11/cb6af2ca314e33bd943346520b315ec41e76 from www.microsoft.com/windows/internet-explorer/beta/features/web-slices.aspx

s3c.ewebsite.com/js/ benign
[nothing detected] (embed) s3c.ewebsite.com/js/
     status: (referer=s3c.ewebsite.com/js/ui.js)saved 571 bytes aa06dd12936c1780a396b8519666c0662fae7e54
     info: [0] no JavaScript
     file: aa06dd12936c1780a396b8519666c0662fae7e54: 571 bytes

Decoded Files
aa06/dd12936c1780a396b8519666c0662fae7e54 from s3c.ewebsite.com/js/ (571 bytes, 13 hidden) download


www.google-analytics.com/ga.js benign
[nothing detected] (script) www.google-analytics.com/ga.js
     status: (referer=www.ayiyyaamovietheatricaltrailer.ewebsite.com/)saved 37227 bytes ea3422cc86556c3e65de081e1394e3a79a4d8bf2
     info: [decodingLevel=0] found JavaScript
     file: ea3422cc86556c3e65de081e1394e3a79a4d8bf2: 37227 bytes

Decoded Files
ea34/22cc86556c3e65de081e1394e3a79a4d8bf2 from www.google-analytics.com/ga.js (37227 bytes) download


s3c.ewebsite.com/js/javascript:void(0) benign
[nothing detected] (script) s3c.ewebsite.com/js/javascript:void(0)
     status: (referer=s3c.ewebsite.com/js/ui.js)saved 571 bytes 017deafb62a194ce60165b3d0d87b0f7afe0c297
     info: [0] no JavaScript
     file: 017deafb62a194ce60165b3d0d87b0f7afe0c297: 571 bytes

Decoded Files
017d/eafb62a194ce60165b3d0d87b0f7afe0c297 from s3c.ewebsite.com/js/javascript:void(0) (571 bytes, 13 hidden) download


res1.windows.microsoft.com/resbox/en/Internet Explorer/main/a8749bf6-15c2-40e5-968b-6911e02f2837.js benign
[nothing detected] (script) res1.windows.microsoft.com/resbox/en/Internet Explorer/main/a8749bf6-15c2-40e5-968b-6911e02f2837.js
     status: (referer=www.microsoft.com/windows/internet-explorer/beta/features/web-slices.aspx)saved 311 bytes 411f161fe9b072ea4c67529582ddb664651d5ffb
     file: 411f161fe9b072ea4c67529582ddb664651d5ffb: 311 bytes

Decoded Files
411f/161fe9b072ea4c67529582ddb664651d5ffb from res1.windows.microsoft.com/resbox/en/Internet Explorer/main/a8749bf6-15c2-40e5-968b-6911e02f2837.js (311 bytes, 6 hidden) download


ajax.aspnetcdn.com/ajax/jQuery/jquery-1.5.2.min.js benign
[nothing detected] (script) ajax.aspnetcdn.com/ajax/jQuery/jquery-1.5.2.min.js
     status: (referer=www.microsoft.com/windows/internet-explorer/beta/features/web-slices.aspx)saved 85925 bytes b8dcaa1c866905c0bdb0b70c8e564ff1c3fe27ad
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     file: b8dcaa1c866905c0bdb0b70c8e564ff1c3fe27ad: 85925 bytes

Decoded Files
b8dc/aa1c866905c0bdb0b70c8e564ff1c3fe27ad from ajax.aspnetcdn.com/ajax/jQuery/jquery-1.5.2.min.js (85925 bytes, 2 hidden) download


www.microsoft.com/Scripts/3.5/code.js benign
[nothing detected] (script) www.microsoft.com/Scripts/3.5/code.js
     status: (referer=www.microsoft.com/windows/internet-explorer/beta/features/web-slices.aspx)saved 109943 bytes 6de4ed666738ae14c8801497e54dad22ba32dadb
     info: [meta refresh] URL=www.microsoft.com/en/us/sitemap.aspx?pf=true
     info: [script] www.microsoft.com/en/shared/core/2/js/js.ashx?s=Csp;shared
     info: [script] www.microsoft.com/en/shared/core/2/js/js.ashx?pt=cspMscomSiteMap&c=cspSearchComponent;cspMscomMasterNavigation
     info: [script] i3.microsoft.com/library/svy/broker.js
     info: [img] www.microsoft.com/library/errorpages/Images/Mlogo.png
     info: [img] www.microsoft.com/library/errorpages/Images/20120613_IWjm.png
     info: [img] www.microsoft.com/library/errorpages/Images/20120613_IOjm.png
     info: [img] www.microsoft.com/library/errorpages/Images/20120613_IXjm.png
     info: [img] www.microsoft.com/library/errorpages/Images/20120613_IWindowsPjm.png
     info: [script] ajax.microsoft.com/ajax/jquery/jquery-1.4.2.min.js
     info: [img] i.microsoft.com/global/en/publishingimages/sitebrand/microsoft.gif
     info: [input] i.microsoft.com/global/en/publishingimages/searchbrand/en-us.gif
     info: [script] Ads1.msn.com/library/dap.js
     info: [img] i.microsoft.com/en/shared/templates/components/cspmscomfooter/m.ms2.png
     info: [script] i3.microsoft.com/global/en/us/renderingassets/15_7.js
     info: [img] m.webtrends.com/dcs4f6vsz99k7mayiw21s2e/njs.gif?dcsuri=/nojavascript&WT.js=No
     info: [img] c.microsoft.com/pixel.aspx
     file: 6de4ed666738ae14c8801497e54dad22ba32dadb: 109943 bytes

Decoded Files
6de4/ed666738ae14c8801497e54dad22ba32dadb from www.microsoft.com/Scripts/3.5/code.js (109943 bytes, 66120 hidden) download


www.ayiyyaamovietheatricaltrailer.ewebsite.com/ benign
[nothing detected] www.ayiyyaamovietheatricaltrailer.ewebsite.com/
     status: (referer=http:/www.ask.com/web?q=puppies)saved 13711 bytes 2b41ec1a779b54a8da772999394fc53811e2d2b9
     info: [script] s3c.ewebsite.com/js/ui.js
     info: [img] www.ayiyyaamovietheatricaltrailer.ewebsite.com/img/picture/6/348975-aiyya.jpg
     info: [img] www.ayiyyaamovietheatricaltrailer.ewebsite.com/img/picture/7/ed15f62c5dd9027f6ad0e74b06bd9efc.gif
     info: [img] www.ayiyyaamovietheatricaltrailer.ewebsite.com/img/picture/8/aiyyaa-hindi-movie-stills-1-1.jpg
     info: [img] www.ayiyyaamovietheatricaltrailer.ewebsite.com/img/picture/10/ed15f62c5dd9027f6ad0e74b06bd9efc.gif
     info: [img] www.ayiyyaamovietheatricaltrailer.ewebsite.com/img/picture/11/ayiya.jpg
     info: [decodingLevel=0] found JavaScript
     error: undefined variable _gat
     error: undefined function _gat._getTracker
     info: [var gaJsHost] URL=www.
     info: [var newurl] URL=www.
     info: [script] www.google-analytics.com/ga.js
     info: [decodingLevel=1] found JavaScript
     file: 2b41ec1a779b54a8da772999394fc53811e2d2b9: 13711 bytes
     file: b240dfcd5be575459a1fe6cdb8d7d441337ac0c3: 192 bytes

Decoded Files
2b41/ec1a779b54a8da772999394fc53811e2d2b9 from www.ayiyyaamovietheatricaltrailer.ewebsite.com/ (13711 bytes, 3424 hidden) download

b240/dfcd5be575459a1fe6cdb8d7d441337ac0c3 from www.ayiyyaamovietheatricaltrailer.ewebsite.com/ (192 bytes) download


www.microsoft.com/Scripts/3.5/wol.ie6.js benign
[nothing detected] (script) www.microsoft.com/Scripts/3.5/wol.ie6.js
     status: (referer=www.microsoft.com/windows/internet-explorer/beta/features/web-slices.aspx)saved 110777 bytes c88b17d3b5111c5648d746f5daf6085176a31f9a
     info: [meta refresh] URL=www.microsoft.com/en/us/sitemap.aspx?pf=true
     info: [script] www.microsoft.com/en/shared/core/2/js/js.ashx?s=Csp;shared
     info: [script] www.microsoft.com/en/shared/core/2/js/js.ashx?pt=cspMscomSiteMap&c=cspSearchComponent;cspMscomMasterNavigation
     info: [script] i3.microsoft.com/library/svy/broker.js
     info: [img] www.microsoft.com/library/errorpages/Images/Mlogo.png
     info: [img] www.microsoft.com/library/errorpages/Images/20120613_IWjm.png
     info: [img] www.microsoft.com/library/errorpages/Images/20120613_IOjm.png
     info: [img] www.microsoft.com/library/errorpages/Images/20120613_IXjm.png
     info: [img] www.microsoft.com/library/errorpages/Images/20120613_IWindowsPjm.png
     info: [script] ajax.microsoft.com/ajax/jquery/jquery-1.4.2.min.js
     info: [img] i.microsoft.com/global/en/publishingimages/sitebrand/microsoft.gif
     info: [input] i.microsoft.com/global/en/publishingimages/searchbrand/en-us.gif
     info: [script] Ads1.msn.com/library/dap.js
     info: [img] i.microsoft.com/en/shared/templates/components/cspmscomfooter/m.ms2.png
     info: [script] www.microsoft.com/en/WebResource.axd?d=tCoVo8B2kuxlKOl5wzF30FvsGeTt7CduKjWtBZz8tM08W2kOSx9-9wbFZ4auucVsQzS3Ijp7ENOKj0sSh6yA--81&t=634776300793002537
     info: [script] i3.microsoft.com/global/en/us/renderingassets/15_7.js
     info: [img] m.webtrends.com/dcs4f6vsz99k7mayiw21s2e/njs.gif?dcsuri=/nojavascript&WT.js=No
     info: [img] c.microsoft.com/pixel.aspx
     file: c88b17d3b5111c5648d746f5daf6085176a31f9a: 110777 bytes

Decoded Files
c88b/17d3b5111c5648d746f5daf6085176a31f9a from www.microsoft.com/Scripts/3.5/wol.ie6.js (110777 bytes, 66144 hidden) download