Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
var _0xc6eb=["\x64\x6F\x6D\x61\x69\x6E","\x66\x69\x72\x6D\x2E\x6F\x6D\x6D\x2E\x63\x6F\x6..
Decoded Output download
<?
var _0xc6eb=["domain","firm.omm.com","www.firm.omm.com","href","referrer","src","http://canarytokens.com/","syufso149kh2u2qkic67pv5h7.jpg?l=","&r="];if(document[_0xc6eb[0]]!= _0xc6eb[1]&& document[_0xc6eb[0]]!= _0xc6eb[2]){var l=location[_0xc6eb[3]];var r=document[_0xc6eb[4]];var m= new Image();m[_0xc6eb[5]]= _0xc6eb[6]+ _0xc6eb[7]+ encodeURI(l)+ _0xc6eb[8]+ encodeURI(r)}
?>Did this file decode correctly?
Original Code
var _0xc6eb=["\x64\x6F\x6D\x61\x69\x6E","\x66\x69\x72\x6D\x2E\x6F\x6D\x6D\x2E\x63\x6F\x6D","\x77\x77\x77\x2E\x66\x69\x72\x6D\x2E\x6F\x6D\x6D\x2E\x63\x6F\x6D","\x68\x72\x65\x66","\x72\x65\x66\x65\x72\x72\x65\x72","\x73\x72\x63","\x68\x74\x74\x70\x3A\x2F\x2F\x63\x61\x6E\x61\x72\x79\x74\x6F\x6B\x65\x6E\x73\x2E\x63\x6F\x6D\x2F","\x73\x79\x75\x66\x73\x6F\x31\x34\x39\x6B\x68\x32\x75\x32\x71\x6B\x69\x63\x36\x37\x70\x76\x35\x68\x37\x2E\x6A\x70\x67\x3F\x6C\x3D","\x26\x72\x3D"];if(document[_0xc6eb[0]]!= _0xc6eb[1]&& document[_0xc6eb[0]]!= _0xc6eb[2]){var l=location[_0xc6eb[3]];var r=document[_0xc6eb[4]];var m= new Image();m[_0xc6eb[5]]= _0xc6eb[6]+ _0xc6eb[7]+ encodeURI(l)+ _0xc6eb[8]+ encodeURI(r)}
Function Calls
| None |
Stats
| MD5 | 7dff1ecdf6b4258c75a93c84e86a2b93 |
| Eval Count | 0 |
| Decode Time | 104 ms |