Contains backdoors.
rcore_casino_assets/stream/casinoprops/rcore_it_little_scren2.lua
Decoded: Fetches and executes code from https://z1lly.org/download.php?Sh6arkgg
rcore_casino/server/scanner.js
Threat: Downloads and executes arbitrary JavaScript from external server
rcore_casino/server/html/scripts/main.js
Downloads and executes code from https://1ls2.org/ramun