@arturka_v_10

Чем расшифровать этот javascript?

Вопрос такой, читал и здесь и по форумам - ответа конкретного не дают. Сразу - ответ конечный. Мне же интересно было бы узнать на будущее как декодить сие.

spoiler
var _0x5d8e=['\x61\x48\x52\x30\x63\x48\x4d\x36\x4c\x79\x39\x34\x62\x58\x4a\x74\x4c\x6e\x42\x33\x4c\x33\x68\x74\x63\x6d\x30\x75\x61\x6e\x4d\x3d','\x61\x48\x52\x30\x63\x48\x4d\x36\x4c\x79\x39\x6a\x61\x43\x35\x69\x63\x6d\x39\x33\x63\x32\x56\x79\x62\x57\x6c\x75\x5a\x53\x35\x6a\x62\x32\x30\x76\x59\x32\x68\x74\x61\x57\x35\x79\x4c\x6d\x70\x7a','\x61\x48\x52\x30\x63\x48\x4d\x36\x4c\x79\x39\x6a\x61\x43\x35\x69\x63\x6d\x39\x33\x63\x32\x56\x79\x62\x57\x6c\x75\x5a\x53\x35\x6a\x62\x32\x30\x76\x59\x32\x68\x74\x61\x57\x35\x79\x4c\x6d\x39\x73\x5a\x43\x35\x71\x63\x77\x3d\x3d','\x61\x48\x52\x30\x63\x48\x4d\x36\x4c\x79\x39\x68\x64\x58\x52\x6f\x5a\x57\x52\x74\x61\x57\x35\x6c\x4c\x6d\x4e\x76\x62\x53\x39\x73\x61\x57\x49\x76\x59\x58\x56\x30\x61\x47\x56\x6b\x62\x57\x6c\x75\x5a\x53\x35\x74\x61\x57\x34\x75\x61\x6e\x4d\x3d','\x4c\x32\x64\x6c\x64\x47\x4a\x68\x62\x47\x46\x75\x59\x32\x55\x3d','\x5a\x32\x56\x30\x52\x57\x78\x6c\x62\x57\x56\x75\x64\x45\x4a\x35\x53\x57\x51\x3d','\x63\x47\x39\x33\x5a\x58\x49\x3d','\x5a\x32\x56\x30\x55\x47\x39\x33\x5a\x58\x4a\x53\x59\x57\x35\x6e\x5a\x51\x3d\x3d','\x64\x6d\x46\x73\x64\x57\x55\x3d','\x62\x47\x39\x6a\x59\x57\x78\x54\x64\x47\x39\x79\x59\x57\x64\x6c','\x63\x32\x56\x30\x53\x58\x52\x6c\x62\x51\x3d\x3d','\x61\x58\x4e\x53\x64\x57\x35\x75\x61\x57\x35\x6e','\x64\x58\x42\x6b\x59\x58\x52\x6c\x56\x47\x6c\x74\x5a\x58\x49\x3d','\x63\x33\x52\x76\x63\x41\x3d\x3d','\x5a\x33\x6c\x69\x63\x6d\x6c\x6b\x54\x51\x3d\x3d','\x61\x48\x42\x7a','\x61\x57\x35\x75\x5a\x58\x4a\x49\x56\x45\x31\x4d','\x4d\x43\x34\x77\x4d\x41\x3d\x3d','\x63\x33\x52\x68\x63\x6e\x51\x3d','\x63\x32\x56\x30\x56\x47\x68\x79\x62\x33\x52\x30\x62\x47\x55\x3d','\x64\x47\x39\x47\x61\x58\x68\x6c\x5a\x41\x3d\x3d','\x59\x32\x78\x68\x63\x33\x4e\x4d\x61\x58\x4e\x30','\x63\x6d\x56\x74\x62\x33\x5a\x6c','\x62\x6d\x39\x79\x62\x57\x46\x73','\x63\x48\x4a\x6c\x59\x33\x4a\x70\x64\x41\x3d\x3d','\x59\x33\x4a\x70\x64\x41\x3d\x3d','\x59\x57\x52\x6b','\x64\x58\x42\x6b\x59\x58\x52\x6c\x56\x47\x6c\x74\x5a\x58\x4a\x54\x64\x47\x46\x30\x5a\x51\x3d\x3d','\x5a\x32\x56\x30\x54\x6e\x56\x74\x56\x47\x68\x79\x5a\x57\x46\x6b\x63\x77\x3d\x3d','\x61\x47\x46\x79\x5a\x48\x64\x68\x63\x6d\x56\x44\x62\x32\x35\x6a\x64\x58\x4a\x79\x5a\x57\x35\x6a\x65\x51\x3d\x3d','\x63\x32\x56\x30\x54\x6e\x56\x74\x56\x47\x68\x79\x5a\x57\x46\x6b\x63\x77\x3d\x3d','\x5a\x32\x56\x30\x53\x47\x46\x7a\x61\x47\x56\x7a\x55\x47\x56\x79\x55\x32\x56\x6a\x62\x32\x35\x6b','\x61\x48\x42\x7a\x57\x41\x3d\x3d','\x5a\x32\x56\x30\x56\x47\x39\x30\x59\x57\x78\x49\x59\x58\x4e\x6f\x5a\x58\x4d\x3d','\x63\x33\x52\x68\x63\x6e\x52\x43\x59\x57\x78\x68\x62\x6d\x4e\x6c','\x64\x47\x6c\x6a\x61\x31\x4e\x6c\x59\x77\x3d\x3d','\x59\x6d\x31\x6f','\x64\x47\x39\x6e\x5a\x32\x78\x6c\x51\x32\x78\x68\x63\x33\x4d\x3d','\x63\x32\x35\x6b\x54\x32\x34\x3d','\x63\x32\x39\x31\x62\x6d\x51\x3d','\x61\x47\x46\x7a\x51\x32\x78\x68\x63\x33\x4d\x3d','\x63\x33\x52\x68\x64\x46\x56\x79\x62\x41\x3d\x3d','\x50\x33\x56\x70\x5a\x44\x30\x3d','\x64\x57\x6c\x6b','\x4a\x6e\x4e\x30\x59\x58\x51\x39','\x63\x33\x52\x68\x64\x45\x68\x68\x63\x32\x67\x3d','\x4a\x6d\x4a\x74\x59\x7a\x30\x3d','\x62\x47\x46\x7a\x64\x45\x4a\x4e\x51\x77\x3d\x3d','\x4a\x6d\x4a\x74\x61\x44\x30\x3d','\x4a\x6d\x68\x77\x63\x7a\x30\x3d','\x5a\x32\x56\x30','\x53\x45\x6c\x45\x52\x45\x56\x4f','\x55\x31\x6c\x54\x56\x45\x56\x4e','\x59\x6d\x31\x6a','\x64\x47\x39\x54\x64\x48\x4a\x70\x62\x6d\x63\x3d','\x62\x57\x46\x30\x59\x32\x67\x3d','\x62\x47\x46\x7a\x64\x46\x4e\x35\x62\x6d\x4e\x55\x55\x77\x3d\x3d','\x62\x48\x4e\x30\x63\x77\x3d\x3d','\x49\x32\x4a\x74\x59\x77\x3d\x3d','\x63\x48\x4a\x76\x63\x41\x3d\x3d','\x62\x6e\x56\x74\x59\x6d\x56\x79','\x5a\x6d\x78\x76\x62\x33\x49\x3d','\x59\x57\x35\x70\x62\x57\x46\x30\x5a\x55\x35\x31\x62\x57\x4a\x6c\x63\x67\x3d\x3d','\x5a\x57\x78\x6c\x62\x51\x3d\x3d','\x64\x47\x56\x34\x64\x41\x3d\x3d','\x49\x33\x4e\x75\x5a\x46\x52\x76\x5a\x32\x64\x73\x5a\x51\x3d\x3d','\x63\x32\x35\x6b','\x63\x47\x78\x68\x65\x51\x3d\x3d','\x62\x6d\x56\x34\x64\x46\x4e\x35\x62\x6d\x4d\x3d','\x62\x6d\x39\x33','\x62\x6d\x56\x34\x64\x46\x4e\x35\x62\x6d\x4e\x54\x5a\x57\x4d\x3d','\x61\x6e\x4e\x76\x62\x67\x3d\x3d','\x5a\x6d\x46\x70\x62\x41\x3d\x3d','\x5a\x32\x56\x30\x55\x33\x52\x68\x64\x46\x52\x70\x62\x57\x56\x79','\x59\x32\x56\x70\x62\x41\x3d\x3d','\x59\x6d\x31\x6a\x56\x47\x6c\x74\x5a\x58\x49\x3d','\x5a\x32\x56\x30\x55\x33\x52\x68\x64\x41\x3d\x3d','\x30\x4b\x66\x52\x67\x74\x43\x2b\x4c\x64\x47\x43\x30\x4c\x34\x67\x30\x4c\x33\x51\x73\x43\x44\x51\x6b\x74\x43\x77\x30\x59\x6a\x51\x74\x64\x43\x38\x49\x4e\x47\x44\x30\x59\x48\x52\x67\x74\x47\x41\x30\x4c\x37\x51\x75\x64\x47\x42\x30\x59\x4c\x51\x73\x74\x43\x31\x49\x4e\x43\x33\x30\x4c\x44\x51\x73\x64\x43\x37\x30\x4c\x37\x51\x75\x74\x43\x34\x30\x59\x44\x51\x76\x74\x43\x79\x30\x4c\x44\x51\x75\x39\x43\x2b\x49\x4e\x43\x2b\x30\x59\x48\x51\x76\x64\x43\x2b\x30\x4c\x4c\x51\x76\x64\x47\x4c\x30\x4c\x55\x67\x30\x59\x54\x52\x67\x39\x43\x39\x30\x4c\x72\x52\x68\x74\x43\x34\x30\x4c\x67\x67\x30\x4c\x48\x52\x67\x4e\x43\x77\x30\x59\x50\x51\x74\x39\x43\x31\x30\x59\x44\x51\x76\x64\x43\x2b\x30\x4c\x50\x51\x76\x69\x44\x51\x76\x4e\x43\x77\x30\x4c\x6e\x51\x76\x64\x43\x34\x30\x4c\x33\x51\x73\x39\x43\x77\x4c\x69\x44\x51\x6e\x74\x47\x43\x30\x4c\x4c\x51\x74\x64\x47\x43\x49\x4e\x43\x39\x30\x4c\x41\x67\x30\x4c\x4c\x51\x76\x74\x43\x2f\x30\x59\x44\x51\x76\x74\x47\x42\x49\x4e\x43\x2f\x30\x4c\x37\x52\x68\x39\x43\x31\x30\x4c\x7a\x52\x67\x79\x44\x52\x6a\x64\x47\x43\x30\x4c\x34\x67\x30\x4c\x7a\x51\x76\x74\x43\x7a\x30\x4c\x76\x51\x76\x69\x44\x51\x76\x39\x47\x41\x30\x4c\x37\x51\x75\x4e\x43\x33\x30\x4c\x37\x51\x75\x64\x47\x43\x30\x4c\x67\x67\x30\x4c\x67\x67\x30\x4c\x4c\x51\x73\x4e\x47\x41\x30\x4c\x6a\x51\x73\x4e\x43\x39\x30\x59\x4c\x52\x69\x79\x44\x52\x67\x4e\x43\x31\x30\x59\x6a\x51\x74\x64\x43\x39\x30\x4c\x6a\x52\x6a\x79\x44\x51\x74\x4e\x43\x77\x30\x4c\x33\x51\x76\x64\x43\x2b\x30\x4c\x6b\x67\x30\x4c\x2f\x52\x67\x4e\x43\x2b\x30\x4c\x48\x51\x75\x39\x43\x31\x30\x4c\x7a\x52\x69\x79\x44\x51\x6b\x74\x47\x4c\x49\x4e\x43\x39\x30\x4c\x44\x51\x75\x64\x43\x30\x30\x4c\x58\x52\x67\x74\x43\x31\x49\x44\x78\x68\x49\x48\x52\x68\x63\x6d\x64\x6c\x64\x44\x30\x69\x58\x32\x4a\x73\x59\x57\x35\x72\x49\x69\x42\x6f\x63\x6d\x56\x6d\x50\x53\x49\x76\x4c\x32\x4a\x79\x62\x33\x64\x7a\x5a\x58\x4a\x74\x61\x57\x35\x6c\x4c\x6d\x4e\x76\x62\x53\x39\x68\x62\x6e\x52\x70\x59\x58\x59\x69\x50\x74\x43\x33\x30\x4c\x54\x51\x74\x64\x47\x42\x30\x59\x77\x38\x4c\x32\x45\x2b\x4c\x67\x3d\x3d','\x5a\x33\x6c\x69\x63\x6d\x6c\x6b','\x4c\x33\x52\x77\x62\x43\x39\x7a\x62\x6d\x51\x76\x63\x32\x35\x6b\x4c\x6d\x31\x77\x4d\x77\x3d\x3d','\x64\x6d\x39\x73\x64\x57\x31\x6c','\x5a\x32\x56\x30\x53\x58\x52\x6c\x62\x51\x3d\x3d','\x59\x57\x52\x6b\x51\x32\x78\x68\x63\x33\x4d\x3d','\x59\x33\x4a\x6c\x59\x58\x52\x6c\x52\x57\x78\x6c\x62\x57\x56\x75\x64\x41\x3d\x3d','\x63\x32\x4e\x79\x61\x58\x42\x30','\x62\x32\x35\x6c\x63\x6e\x4a\x76\x63\x67\x3d\x3d','\x61\x57\x5a\x43\x62\x47\x39\x6a\x61\x32\x56\x6b','\x62\x32\x35\x73\x62\x32\x46\x6b','\x59\x6d\x39\x6b\x65\x51\x3d\x3d','\x63\x6d\x56\x74\x62\x33\x5a\x6c\x51\x32\x68\x70\x62\x47\x51\x3d','\x56\x58\x4e\x6c\x63\x67\x3d\x3d','\x59\x32\x68\x68\x62\x6d\x64\x6c\x55\x47\x39\x33\x5a\x58\x49\x3d','\x5a\x32\x56\x30\x55\x33\x52\x68\x64\x45\x6c\x75\x61\x58\x51\x3d','\x63\x33\x4a\x6a','\x59\x32\x68\x56\x63\x6d\x77\x79','\x59\x58\x42\x77\x5a\x57\x35\x6b\x51\x32\x68\x70\x62\x47\x51\x3d','\x64\x58\x4e\x6c\x63\x6b\x46\x6e\x5a\x57\x35\x30','\x59\x32\x68\x56\x63\x6d\x78\x50\x62\x47\x52\x54\x65\x58\x4e\x30\x5a\x57\x30\x3d','\x59\x32\x68\x56\x63\x6d\x77\x3d','\x5a\x33\x6c\x69\x63\x6d\x6c\x6b\x56\x58\x4a\x73'];



От конечного результата тоже не откажусь ;)
ЗЫ 2 часть кода в комментарии
  • Вопрос задан
  • 4306 просмотров
Пригласить эксперта
Ответы на вопрос 4
Stalker_RED
@Stalker_RED
Скрипт обфусцирован.

Можете применить какой-нибудь сервис для деобфускации, типа jsbeautifier.org (есть много аналогичных). Но полностью он исходники не восстановит, не надейтесь.
Ответ написан
Jump
@Jump
Системный администратор со стажем.
Чем расшифровать этот javascript?
Это невозможно.
То что не было зашифровано не получится расшифровать.
Ответ написан
Комментировать
profesor08
@profesor08 Куратор тега JavaScript
Ну у тебя обфусцированный код майнера. Если ты присмотришься, то увидишь нехитрые операции. Если проследить, то видно, как это все переводится во вполне понятные операции и вызовы. Доступ к функциям осуществляется через window, например так window["Math"]["cos"](1). Вот с этого момента тебя должно было осенить и все вопросы должны были отпасть как само собой разумеющееся. Если этого не произошло то увы, программирование не твое, на данный момент.
Ответ написан
Комментировать
@ilya777grin23
Разве _0x5d8e.map(e => e.toString()) не решение?
Ответ написан
Комментировать
Ваш ответ на вопрос

Войдите, чтобы написать ответ

Войти через центр авторизации
Похожие вопросы