diff --git a/patterns_raw.txt b/patterns_raw.txt index 468476b..dac16d2 100644 --- a/patterns_raw.txt +++ b/patterns_raw.txt @@ -94,6 +94,11 @@ ZmlsZV9nZXRfY29udGVudH ZpbGVfZ2V0X2NvbnRlbnRz maWxlX2dldF9jb250ZW50c +# "gzinflate" in base64 +Z3ppbmZsYXRl +d6aW5mbGF0Z +nemluZmxhdG + # "fopen" in base64 Zm9wZW ZvcGVu @@ -122,6 +127,8 @@ eval(base64_decode( $data = base64_decode(" edoced_46esab base=base64_encode +cr"."eat"."e_fun"."cti"."on +gz'.'inf'.'late # fopo.com.ar - free online php obfuscator. It conveniently leaves comments in the code. http://www.fopo.com.ar/